Unnamed

public text v1 · immutable
#798552
·published 2007-11-26 21:32 UTC
type=DAEMON_START msg=audit(1195147497.969:230) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1539 res=success, auditd pid=1539
type=CONFIG_CHANGE msg=audit(1195147497.962:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195147497.962:6): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1195147497.962:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195147497.962:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=AVC msg=audit(1195147520.459:9): avc:  denied  { read write } for  pid=2338 comm="modprobe" name="[10307]" dev=sockfs ino=10307 scontext=system_u:system_r:insmod_t:s0 tcontext=system_u:system_r:firstboot_t:s0 tclass=unix_stream_socket
type=SYSCALL msg=audit(1195147520.459:9): arch=40000003 syscall=11 success=yes exit=0 a0=bf9cb698 a1=bf9ca658 a2=bf9cc030 a3=400 items=0 ppid=2326 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty6 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
type=AVC_PATH msg=audit(1195147520.459:9):  path="socket:[10307]"
type=USYS_CONFIG msg=audit(1195147892.483:10): user pid=2477 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=console res=success)'
type=USER_AUTH msg=audit(1195148563.381:11): user pid=2598 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1195148563.381:12): user pid=2598 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_ACQ msg=audit(1195148563.381:13): user pid=2598 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1195148563.381:14): login pid=2598 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1195148563.381:15): user pid=2598 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195148563.381:16): user pid=2598 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_AUTH msg=audit(1195148602.875:17): user pid=3025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_ACCT msg=audit(1195148602.875:18): user pid=3025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_START msg=audit(1195148602.875:19): user pid=3025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_ACQ msg=audit(1195148602.875:20): user pid=3025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_DISP msg=audit(1195148602.875:21): user pid=3025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_END msg=audit(1195148602.875:22): user pid=3025 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_AUTH msg=audit(1195148605.375:23): user pid=3030 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_ACCT msg=audit(1195148605.375:24): user pid=3030 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_START msg=audit(1195148605.375:25): user pid=3030 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_ACQ msg=audit(1195148605.375:26): user pid=3030 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USYS_CONFIG msg=audit(1195148790.068:27): user pid=3043 uid=0 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_DISP msg=audit(1195148795.567:28): user pid=3030 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_END msg=audit(1195148795.567:29): user pid=3030 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_AUTH msg=audit(1195148864.557:30): user pid=3063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_ACCT msg=audit(1195148864.557:31): user pid=3063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_START msg=audit(1195148864.557:32): user pid=3063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_ACQ msg=audit(1195148864.557:33): user pid=3063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_DISP msg=audit(1195148864.557:34): user pid=3063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_END msg=audit(1195148864.557:35): user pid=3063 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_AUTH msg=audit(1195148866.556:36): user pid=3068 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_ACCT msg=audit(1195148866.556:37): user pid=3068 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_START msg=audit(1195148866.556:38): user pid=3068 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_ACQ msg=audit(1195148866.556:39): user pid=3068 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_AUTH msg=audit(1195149206.004:40): user pid=3322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195149206.004:41): user pid=3322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195149206.004:42): user pid=3322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_END msg=audit(1195149214.503:43): user pid=3322 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_AUTH msg=audit(1195149235.000:44): user pid=3327 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195149235.000:45): user pid=3327 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195149235.000:46): user pid=3327 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_END msg=audit(1195149240.499:47): user pid=3327 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195149660.935:48): user pid=3449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195149660.935:49): user pid=3449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195149660.935:50): login pid=3449 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195149660.935:51): user pid=3449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195149660.935:52): user pid=3449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195149660.935:53): user pid=3449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_AUTH msg=audit(1195150060.874:54): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195150060.874:55): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195150060.874:56): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195153261.386:57): user pid=11435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195153261.386:58): user pid=11435 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195153261.386:59): login pid=11435 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195153261.386:60): user pid=11435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195153261.386:61): user pid=11435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195153261.386:62): user pid=11435 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195156861.337:63): user pid=11609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195156861.337:64): user pid=11609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195156861.337:65): login pid=11609 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195156861.337:66): user pid=11609 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195156861.337:67): user pid=11609 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195156861.337:68): user pid=11609 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_AUTH msg=audit(1195160454.288:69): user pid=12420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=wojtek : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195160454.288:70): user pid=12420 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=wojtek : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195160461.787:71): user pid=12424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195160461.787:72): user pid=12424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195160461.787:73): login pid=12424 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195160461.787:74): user pid=12424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195160461.787:75): user pid=12424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195160461.787:76): user pid=12424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_AUTH msg=audit(1195160879.224:77): user pid=12651 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=wojtek : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195160879.224:78): user pid=12651 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=wojtek : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_END msg=audit(1195160961.711:79): user pid=3529 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195164061.738:80): user pid=12825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195164061.738:81): user pid=12825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195164061.738:82): login pid=12825 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195164061.738:83): user pid=12825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195164061.738:84): user pid=12825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195164061.738:85): user pid=12825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195167661.689:86): user pid=12995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195167661.689:87): user pid=12995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195167661.689:88): login pid=12995 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195167661.689:89): user pid=12995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195167661.689:90): user pid=12995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195167661.689:91): user pid=12995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195171261.640:92): user pid=13165 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195171261.640:93): user pid=13165 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195171261.640:94): login pid=13165 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195171261.640:95): user pid=13165 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195171261.640:96): user pid=13165 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195171261.640:97): user pid=13165 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_AUTH msg=audit(1195173627.779:98): user pid=13510 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1195173627.779:99): user pid=13510 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1195173627.779:100): user pid=13510 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1195173627.779:101): user pid=13510 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_DISP msg=audit(1195174530.141:102): user pid=13510 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1195174530.141:103): user pid=13510 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_DISP msg=audit(1195174550.138:104): user pid=3068 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_END msg=audit(1195174550.138:105): user pid=3068 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_AUTH msg=audit(1195174810.098:106): user pid=13679 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195174810.098:107): user pid=13679 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195174810.098:108): user pid=13679 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195174860.591:109): user pid=13688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195174860.591:110): user pid=13688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195174860.591:111): login pid=13688 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195174860.591:112): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195174860.591:113): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195174860.591:114): user pid=13688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195175308.522:115): user pid=13679 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=AVC msg=audit(1195175332.519:116): avc:  denied  { append } for  pid=14024 comm="pam_console_app" name="kdm.log" dev=sda7 ino=475589 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=AVC msg=audit(1195175332.519:116): avc:  denied  { append } for  pid=14024 comm="pam_console_app" name="kdm.log" dev=sda7 ino=475589 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1195175332.519:116): arch=40000003 syscall=11 success=yes exit=0 a0=95a7a68 a1=95a8430 a2=bfeb48a0 a3=95a7a98 items=0 ppid=2598 pid=14024 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195175332.519:116):  path="/var/log/kdm.log"
type=AVC_PATH msg=audit(1195175332.519:116):  path="/var/log/kdm.log"
type=USER_END msg=audit(1195175332.519:117): user pid=2598 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1195175332.519:118): user pid=2598 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=DAEMON_END msg=audit(1195175341.149:231) auditd normal halt, sending auid=4294967295 pid=14388 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1539
type=DAEMON_START msg=audit(1195175401.557:6016) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1510 res=success, auditd pid=1510
type=CONFIG_CHANGE msg=audit(1195175401.283:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195175401.283:6): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1195175401.283:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195175401.283:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=AVC msg=audit(1195175402.282:9): avc:  denied  { read } for  pid=1583 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195175402.282:9): arch=40000003 syscall=5 success=no exit=-13 a0=af1f80 a1=0 a2=1b6 a3=811626a0 items=0 ppid=1582 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195175402.282:10): avc:  denied  { read } for  pid=1583 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195175402.282:10): arch=40000003 syscall=5 success=no exit=-13 a0=af1f80 a1=0 a2=1b6 a3=811626a0 items=0 ppid=1582 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195175402.282:11): avc:  denied  { read } for  pid=1583 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195175402.282:11): arch=40000003 syscall=5 success=no exit=-13 a0=af1f80 a1=0 a2=1b6 a3=811626a0 items=0 ppid=1582 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195175402.282:12): avc:  denied  { read } for  pid=1583 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195175402.282:12): arch=40000003 syscall=5 success=no exit=-13 a0=af1f80 a1=0 a2=1b6 a3=811626a0 items=0 ppid=1582 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195175402.282:13): avc:  denied  { read } for  pid=1584 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195175402.282:13): arch=40000003 syscall=5 success=no exit=-13 a0=af1f80 a1=0 a2=1b6 a3=81160520 items=0 ppid=1583 pid=1584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195175402.282:14): avc:  denied  { read } for  pid=1584 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195175402.282:14): arch=40000003 syscall=5 success=no exit=-13 a0=af1f80 a1=0 a2=1b6 a3=81160520 items=0 ppid=1583 pid=1584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195175402.282:15): avc:  denied  { read } for  pid=1584 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195175402.282:15): arch=40000003 syscall=5 success=no exit=-13 a0=af1f80 a1=0 a2=1b6 a3=81160520 items=0 ppid=1583 pid=1584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=DAEMON_END msg=audit(1195175457.770:6017) auditd normal halt, sending auid=4294967295 pid=2761 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1510
type=DAEMON_START msg=audit(1195219092.318:4632) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1509 res=success, auditd pid=1509
type=CONFIG_CHANGE msg=audit(1195219092.272:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195219092.272:6): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1195219092.272:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195219092.272:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=AVC msg=audit(1195219093.272:9): avc:  denied  { read } for  pid=1582 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195219093.272:9): arch=40000003 syscall=5 success=no exit=-13 a0=780f80 a1=0 a2=1b6 a3=8176d6a0 items=0 ppid=1581 pid=1582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195219093.272:10): avc:  denied  { read } for  pid=1582 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195219093.272:10): arch=40000003 syscall=5 success=no exit=-13 a0=780f80 a1=0 a2=1b6 a3=8176d6a0 items=0 ppid=1581 pid=1582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195219093.272:11): avc:  denied  { read } for  pid=1582 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195219093.272:11): arch=40000003 syscall=5 success=no exit=-13 a0=780f80 a1=0 a2=1b6 a3=8176d6a0 items=0 ppid=1581 pid=1582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195219093.272:12): avc:  denied  { read } for  pid=1582 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195219093.272:12): arch=40000003 syscall=5 success=no exit=-13 a0=780f80 a1=0 a2=1b6 a3=8176d6a0 items=0 ppid=1581 pid=1582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195219093.272:13): avc:  denied  { read } for  pid=1583 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195219093.272:13): arch=40000003 syscall=5 success=no exit=-13 a0=780f80 a1=0 a2=1b6 a3=8176b520 items=0 ppid=1582 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195219093.272:14): avc:  denied  { read } for  pid=1583 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195219093.272:14): arch=40000003 syscall=5 success=no exit=-13 a0=780f80 a1=0 a2=1b6 a3=8176b520 items=0 ppid=1582 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195219093.272:15): avc:  denied  { read } for  pid=1583 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195219093.272:15): arch=40000003 syscall=5 success=no exit=-13 a0=780f80 a1=0 a2=1b6 a3=8176b520 items=0 ppid=1582 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=USER_AUTH msg=audit(1195219279.244:16): user pid=2331 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1195219279.244:17): user pid=2331 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_ACQ msg=audit(1195219279.744:18): user pid=2331 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1195219279.744:19): login pid=2331 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1195219279.744:20): user pid=2331 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195219279.744:21): user pid=2331 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_AUTH msg=audit(1195219625.691:22): user pid=2639 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1195219625.691:23): user pid=2639 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_START msg=audit(1195219625.691:24): user pid=2639 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_ACQ msg=audit(1195219625.691:25): user pid=2639 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1195221660.880:26): user pid=2941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195221660.880:27): user pid=2941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195221660.880:28): login pid=2941 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195221660.880:29): user pid=2941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195221660.880:30): user pid=2941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195221660.880:31): user pid=2941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_AUTH msg=audit(1195223847.047:32): user pid=3564 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1195223847.047:33): user pid=3564 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195223847.047:34): user pid=3564 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_AUTH msg=audit(1195224548.440:35): user pid=3790 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1195224548.440:36): user pid=3790 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1195224548.440:37): user pid=3790 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1195224548.440:38): user pid=3790 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_DISP msg=audit(1195224548.440:39): user pid=3790 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1195224548.440:40): user pid=3790 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_AUTH msg=audit(1195224551.439:41): user pid=3795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1195224551.439:42): user pid=3795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1195224551.439:43): user pid=3795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1195224551.439:44): user pid=3795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_DISP msg=audit(1195224926.382:45): user pid=2639 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_END msg=audit(1195224926.882:46): user pid=2639 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_DISP msg=audit(1195224926.882:47): user pid=3795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1195224926.882:48): user pid=3795 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=AVC msg=audit(1195224926.882:49): avc:  denied  { append } for  pid=3919 comm="pam_console_app" name="kdm.log" dev=sda7 ino=475589 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=AVC msg=audit(1195224926.882:49): avc:  denied  { append } for  pid=3919 comm="pam_console_app" name="kdm.log" dev=sda7 ino=475589 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1195224926.882:49): arch=40000003 syscall=11 success=yes exit=0 a0=8918a80 a1=89191f8 a2=bfec6fb0 a3=8918ab0 items=0 ppid=2331 pid=3919 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195224926.882:49):  path="/var/log/kdm.log"
type=AVC_PATH msg=audit(1195224926.882:49):  path="/var/log/kdm.log"
type=USER_END msg=audit(1195224926.882:50): user pid=2331 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1195224926.882:51): user pid=2331 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_AUTH msg=audit(1195224961.377:52): user pid=4181 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1195224961.377:53): user pid=4181 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_ACQ msg=audit(1195224961.377:54): user pid=4181 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1195224961.377:55): login pid=4181 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1195224961.877:56): user pid=4181 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195224961.877:57): user pid=4181 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_AUTH msg=audit(1195225010.869:58): user pid=4444 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1195225010.869:59): user pid=4444 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_START msg=audit(1195225010.869:60): user pid=4444 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_ACQ msg=audit(1195225010.869:61): user pid=4444 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=AVC msg=audit(1195225018.368:62): avc:  denied  { append } for  pid=4469 comm="pam_console_app" name="kdm.log" dev=sda7 ino=475589 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=AVC msg=audit(1195225018.368:62): avc:  denied  { append } for  pid=4469 comm="pam_console_app" name="kdm.log" dev=sda7 ino=475589 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1195225018.368:62): arch=40000003 syscall=11 success=yes exit=0 a0=8d19a80 a1=8d1a1f8 a2=bfd683d0 a3=8d19ab0 items=0 ppid=4181 pid=4469 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195225018.368:62):  path="/var/log/kdm.log"
type=AVC_PATH msg=audit(1195225018.368:62):  path="/var/log/kdm.log"
type=USER_END msg=audit(1195225018.368:63): user pid=4181 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1195225018.368:64): user pid=4181 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1195225018.368:65): user pid=4444 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_END msg=audit(1195225018.368:66): user pid=4444 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=DAEMON_END msg=audit(1195225025.269:4633) auditd normal halt, sending auid=4294967295 pid=4839 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1509
type=DAEMON_START msg=audit(1195824622.549:9002) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1525 res=success, auditd pid=1525
type=CONFIG_CHANGE msg=audit(1195824622.272:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195824622.272:6): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1195824622.272:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195824622.272:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=AVC msg=audit(1195824622.772:9): avc:  denied  { search } for  pid=1563 comm="klogd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:klogd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824622.772:9): arch=40000003 syscall=5 success=no exit=-2 a0=8000474e a1=0 a2=1b6 a3=800b0008 items=0 ppid=1562 pid=1563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="klogd" exe="/sbin/klogd" subj=system_u:system_r:klogd_t:s0 key=(null)
type=AVC msg=audit(1195824623.272:10): avc:  denied  { read } for  pid=1598 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195824623.272:10): arch=40000003 syscall=5 success=yes exit=3 a0=24cf80 a1=0 a2=1b6 a3=801446a0 items=0 ppid=1597 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195824623.272:11): avc:  denied  { getattr } for  pid=1598 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195824623.272:11): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bf94b0ac a2=277ff4 a3=0 items=0 ppid=1597 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195824623.272:11):  path="/etc/localtime"
type=AVC msg=audit(1195824623.272:12): avc:  denied  { search } for  pid=1598 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824623.272:12): arch=40000003 syscall=10 success=no exit=-2 a0=8000380c a1=80003828 a2=8000410c a3=bf94b406 items=0 ppid=1597 pid=1598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195824624.272:13): avc:  denied  { search } for  pid=1667 comm="rpc.statd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824624.272:13): arch=40000003 syscall=12 success=yes exit=0 a0=8000939e a1=0 a2=8000b178 a3=bfa23048 items=0 ppid=1666 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
type=AVC msg=audit(1195824626.272:14): avc:  denied  { search } for  pid=1734 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824626.272:14): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfd2e838 a2=4be76ff4 a3=4 items=0 ppid=1733 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195824626.772:15): avc:  denied  { search } for  pid=1750 comm="hcid" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824626.772:15): arch=40000003 syscall=5 success=yes exit=3 a0=b7fd036a a1=0 a2=262 a3=b7fd036a items=0 ppid=1749 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hcid" exe="/usr/sbin/hcid" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1195824626.772:16): avc:  denied  { search } for  pid=1754 comm="sdpd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824626.772:16): arch=40000003 syscall=5 success=yes exit=3 a0=b7f5036a a1=0 a2=262 a3=b7f5036a items=0 ppid=1753 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sdpd" exe="/usr/sbin/sdpd" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1195824626.772:17): avc:  denied  { search } for  pid=1735 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824626.772:17): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfd2f420 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1735 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195824628.272:18): avc:  denied  { search } for  pid=1863 comm="cupsd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824628.272:18): arch=40000003 syscall=5 success=yes exit=3 a0=b7f14d4a a1=0 a2=1e4 a3=b7f14d4a items=0 ppid=1862 pid=1863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195824629.771:19): avc:  denied  { search } for  pid=1927 comm="console-kit-dae" name="/" dev=sda6 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824629.771:19): arch=40000003 syscall=5 success=yes exit=3 a0=b7f7cac9 a1=0 a2=233 a3=b7f7cac9 items=0 ppid=1926 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=AVC msg=audit(1195824631.271:20): avc:  denied  { search } for  pid=2068 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824631.271:20): arch=40000003 syscall=5 success=yes exit=3 a0=b7f1891c a1=0 a2=2e3 a3=b7f1891c items=0 ppid=2067 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195824631.771:21): avc:  denied  { search } for  pid=2128 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824631.771:21): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfcb4a30 a2=4b4b7494 a3=1f items=0 ppid=2127 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195824632.771:22): avc:  denied  { search } for  pid=2157 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824632.771:22): arch=40000003 syscall=5 success=yes exit=3 a0=b7f335bc a1=0 a2=26f a3=b7f335bc items=0 ppid=2146 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1195824633.771:23): avc:  denied  { search } for  pid=1735 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824633.771:23): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfd2f420 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1735 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195824635.770:24): avc:  denied  { search } for  pid=2192 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824635.770:24): arch=40000003 syscall=5 success=yes exit=3 a0=b7f6596b a1=0 a2=1cd a3=b7f6596b items=0 ppid=2176 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=AVC msg=audit(1195824639.270:25): avc:  denied  { search } for  pid=2259 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824639.270:25): arch=40000003 syscall=5 success=yes exit=3 a0=b7fde96b a1=0 a2=1cd a3=b7fde96b items=0 ppid=2258 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195824639.770:26): avc:  denied  { search } for  pid=2300 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824639.770:26): arch=40000003 syscall=5 success=yes exit=3 a0=b7f040e7 a1=0 a2=32 a3=b7f040e7 items=0 ppid=2299 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1195824640.270:27): avc:  denied  { search } for  pid=2305 comm="mingetty" name="/" dev=sda9 ino=2 scontext=system_u:system_r:getty_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824640.270:27): arch=40000003 syscall=33 success=no exit=-2 a0=4be4d099 a1=0 a2=4be76ff4 a3=4be4d099 items=0 ppid=1 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mingetty" exe="/sbin/mingetty" subj=system_u:system_r:getty_t:s0 key=(null)
type=AVC msg=audit(1195824640.270:28): avc:  denied  { search } for  pid=2128 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824640.270:28): arch=40000003 syscall=33 success=no exit=-2 a0=bfcb3d28 a1=4 a2=8e8b38d a3=8e8ca60 items=0 ppid=1 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195824642.769:29): avc:  denied  { search } for  pid=2378 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824642.769:29): arch=40000003 syscall=11 success=yes exit=0 a0=85b0360 a1=85b1d68 a2=bf9372e0 a3=400 items=0 ppid=2260 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="killall" exe="/usr/bin/killall" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195824645.769:30): avc:  denied  { search } for  pid=2069 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824645.769:30): arch=40000003 syscall=5 success=yes exit=5 a0=bfdc9627 a1=0 a2=0 a3=53 items=0 ppid=1 pid=2069 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195824649.268:31): avc:  denied  { search } for  pid=2069 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824649.268:31): arch=40000003 syscall=5 success=yes exit=5 a0=bfdc9627 a1=0 a2=e a3=53 items=0 ppid=1 pid=2069 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195824873.734:32): avc:  denied  { search } for  pid=2397 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824873.734:32): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfcaf9c8 a2=4be76ff4 a3=3 items=0 ppid=2343 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195824873.734:33): avc:  denied  { search } for  pid=1735 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824873.734:33): arch=40000003 syscall=33 success=no exit=-2 a0=9643c68 a1=0 a2=809d4b0 a3=bfd2f398 items=0 ppid=1 pid=1735 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_AUTH msg=audit(1195824980.218:34): user pid=2350 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1195824980.218:35): user pid=2350 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195824980.218:36): avc:  denied  { search } for  pid=1928 comm="console-kit-dae" name="/" dev=sda9 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824980.218:36): arch=40000003 syscall=5 success=yes exit=9 a0=4b4ad1ac a1=0 a2=3 a3=bf9e3898 items=0 ppid=1 pid=1928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=CRED_ACQ msg=audit(1195824980.218:37): user pid=2350 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1195824980.218:38): login pid=2350 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1195824980.218:39): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195824980.218:40): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195824980.718:41): avc:  denied  { search } for  pid=2407 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195824980.718:41): arch=40000003 syscall=5 success=yes exit=3 a0=b7f8696b a1=0 a2=1cd a3=b7f8696b items=0 ppid=2176 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=USER_ACCT msg=audit(1195826461.492:42): user pid=2678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195826461.492:43): user pid=2678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195826461.492:44): login pid=2678 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195826461.492:45): user pid=2678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195826461.492:46): user pid=2678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195826461.492:47): user pid=2678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1195826672.960:48): avc:  denied  { search } for  pid=1735 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195826672.960:48): arch=40000003 syscall=33 success=no exit=-2 a0=9653d00 a1=0 a2=809d4b0 a3=bfd2f398 items=0 ppid=1 pid=1735 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195828229.722:49): avc:  denied  { search } for  pid=2814 comm="procmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195828229.722:49): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfde2798 a2=4be76ff4 a3=3 items=0 ppid=2813 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1195828252.719:50): avc:  denied  { search } for  pid=2820 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195828252.719:50): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfb40108 a2=4be76ff4 a3=3 items=0 ppid=2343 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195829038.599:51): avc:  denied  { search } for  pid=2904 comm="sendmail" name="/" dev=sda6 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195829038.599:51): arch=40000003 syscall=5 success=yes exit=3 a0=b7f73947 a1=0 a2=1cc a3=b7f73947 items=0 ppid=2868 pid=2904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC msg=audit(1195829038.599:52): avc:  denied  { getattr } for  pid=2904 comm="sendmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195829038.599:52): arch=40000003 syscall=196 success=yes exit=0 a0=bf9abaf8 a1=bf9979e0 a2=64bff4 a3=3 items=0 ppid=2868 pid=2904 auid=4294967295 uid=51 gid=51 euid=51 suid=51 fsuid=51 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC_PATH msg=audit(1195829038.599:52):  path="/var"
type=AVC msg=audit(1195829073.593:53): avc:  denied  { search } for  pid=3082 comm="procmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195829073.593:53): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfc87648 a2=4be76ff4 a3=3 items=0 ppid=3081 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1195829084.592:54): avc:  denied  { search } for  pid=3083 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195829084.592:54): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bf95c668 a2=4be76ff4 a3=3 items=0 ppid=2343 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195829084.592:55): avc:  denied  { search } for  pid=1735 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195829084.592:55): arch=40000003 syscall=33 success=no exit=-2 a0=9654390 a1=0 a2=809d4b0 a3=bfd2f398 items=0 ppid=1 pid=1735 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_ACCT msg=audit(1195830060.943:56): user pid=3129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195830060.943:57): user pid=3129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195830060.943:58): login pid=3129 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195830060.943:59): user pid=3129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195830060.943:60): user pid=3129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195830060.943:61): user pid=3129 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1195831528.719:62): avc:  denied  { search } for  pid=2069 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195831528.719:62): arch=40000003 syscall=5 success=yes exit=5 a0=bfdc9617 a1=0 a2=2f a3=bfdc9617 items=0 ppid=1 pid=2069 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=USER_AUTH msg=audit(1195832838.519:63): user pid=3293 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1195832838.519:64): user pid=3293 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1195832838.519:65): user pid=3293 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1195832838.519:66): user pid=3293 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_DISP msg=audit(1195832838.519:67): user pid=3293 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1195832838.519:68): user pid=3293 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_AUTH msg=audit(1195832841.519:69): user pid=3298 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1195832841.519:70): user pid=3298 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1195832841.519:71): user pid=3298 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1195832841.519:72): user pid=3298 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1195833660.894:73): user pid=3391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195833660.894:74): user pid=3391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195833660.894:75): login pid=3391 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195833660.894:76): user pid=3391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195833660.894:77): user pid=3391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195833660.894:78): user pid=3391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195836909.398:79): user pid=3298 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1195836909.398:80): user pid=3298 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_AUTH msg=audit(1195836951.891:81): user pid=3652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1195836951.891:82): user pid=3652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_START msg=audit(1195836951.891:83): user pid=3652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_ACQ msg=audit(1195836951.891:84): user pid=3652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_DISP msg=audit(1195837064.874:85): user pid=3652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_END msg=audit(1195837064.874:86): user pid=3652 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=AVC msg=audit(1195837105.868:87): avc:  denied  { append } for  pid=3726 comm="pam_console_app" name="kdm.log" dev=sda9 ino=224258 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1195837105.868:87): arch=40000003 syscall=11 success=yes exit=0 a0=832aa80 a1=832b0a8 a2=bfab1400 a3=832aab0 items=0 ppid=2350 pid=3726 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195837105.868:87):  path="/var/log/kdm.log"
type=AVC msg=audit(1195837105.868:88): avc:  denied  { search } for  pid=3727 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195837105.868:88): arch=40000003 syscall=5 success=yes exit=3 a0=b7efe96b a1=0 a2=1cd a3=b7efe96b items=0 ppid=2176 pid=3727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=USER_END msg=audit(1195837105.868:89): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1195837105.868:90): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195837107.868:91): avc:  denied  { search } for  pid=2302 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195837107.868:91): arch=40000003 syscall=195 success=yes exit=0 a0=bfa3f720 a1=bfa3f79c a2=4be76ff4 a3=bfa3f720 items=0 ppid=1 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1195837108.368:92): avc:  denied  { search } for  pid=3793 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195837108.368:92): arch=40000003 syscall=5 success=yes exit=3 a0=b7fa45bc a1=0 a2=26f a3=b7fa45bc items=0 ppid=3783 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1195837108.368:93): avc:  denied  { search } for  pid=1735 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195837108.368:93): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfd2f420 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1735 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195837108.368:94): avc:  denied  { search } for  pid=2260 comm="NetworkManager" name="/" dev=sda9 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195837108.368:94): arch=40000003 syscall=10 success=yes exit=0 a0=85a7b10 a1=4be76ff4 a2=85ab120 a3=85ab120 items=0 ppid=1 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195837108.868:95): avc:  denied  { search } for  pid=1864 comm="cupsd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195837108.868:95): arch=40000003 syscall=10 success=yes exit=0 a0=818b549e a1=818ac1d0 a2=8005bff4 a3=818b5498 items=0 ppid=1 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195837113.367:96): avc:  denied  { search } for  pid=1599 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195837113.367:96): arch=40000003 syscall=10 success=yes exit=0 a0=8000380c a1=1 a2=8000410c a3=0 items=0 ppid=1 pid=1599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=DAEMON_END msg=audit(1195837113.903:9003) auditd normal halt, sending auid=4294967295 pid=4103 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1525
type=DAEMON_START msg=audit(1195861103.424:2271) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1530 res=success, auditd pid=1530
type=CONFIG_CHANGE msg=audit(1195861103.281:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195861103.281:6): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1195861103.281:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195861103.281:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=AVC msg=audit(1195861103.781:9): avc:  denied  { search } for  pid=1568 comm="klogd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:klogd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861103.781:9): arch=40000003 syscall=5 success=no exit=-2 a0=8000474e a1=0 a2=1b6 a3=806e4008 items=0 ppid=1567 pid=1568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="klogd" exe="/sbin/klogd" subj=system_u:system_r:klogd_t:s0 key=(null)
type=AVC msg=audit(1195861104.281:10): avc:  denied  { read } for  pid=1603 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195861104.281:10): arch=40000003 syscall=5 success=yes exit=3 a0=644f80 a1=0 a2=1b6 a3=8151e6a0 items=0 ppid=1602 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195861104.281:11): avc:  denied  { getattr } for  pid=1603 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195861104.281:11): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bf9ca38c a2=66fff4 a3=0 items=0 ppid=1602 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195861104.281:11):  path="/etc/localtime"
type=AVC msg=audit(1195861104.281:12): avc:  denied  { search } for  pid=1603 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861104.281:12): arch=40000003 syscall=10 success=no exit=-2 a0=8000380c a1=80003828 a2=8000410c a3=bf9ca6e6 items=0 ppid=1602 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195861105.281:13): avc:  denied  { search } for  pid=1672 comm="rpc.statd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861105.281:13): arch=40000003 syscall=12 success=yes exit=0 a0=8000939e a1=0 a2=8000b178 a3=bfc12d58 items=0 ppid=1671 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
type=AVC msg=audit(1195861106.781:14): avc:  denied  { search } for  pid=1739 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861106.781:14): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfdd9b88 a2=4be76ff4 a3=4 items=0 ppid=1738 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195861107.281:15): avc:  denied  { search } for  pid=1755 comm="hcid" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861107.281:15): arch=40000003 syscall=5 success=yes exit=3 a0=b7f1836a a1=0 a2=262 a3=b7f1836a items=0 ppid=1754 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hcid" exe="/usr/sbin/hcid" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1195861107.281:16): avc:  denied  { search } for  pid=1759 comm="sdpd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861107.281:16): arch=40000003 syscall=5 success=yes exit=3 a0=b7f3a36a a1=0 a2=262 a3=b7f3a36a items=0 ppid=1758 pid=1759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sdpd" exe="/usr/sbin/sdpd" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1195861107.281:17): avc:  denied  { search } for  pid=1740 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861107.281:17): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfdda770 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1740 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195861109.280:18): avc:  denied  { search } for  pid=1866 comm="cupsd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861109.280:18): arch=40000003 syscall=5 success=yes exit=3 a0=b7f6ad4a a1=0 a2=1e4 a3=b7f6ad4a items=0 ppid=1865 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195861110.780:19): avc:  denied  { search } for  pid=1930 comm="console-kit-dae" name="/" dev=sda6 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861110.780:19): arch=40000003 syscall=5 success=yes exit=3 a0=b7f1fac9 a1=0 a2=233 a3=b7f1fac9 items=0 ppid=1929 pid=1930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=AVC msg=audit(1195861112.280:20): avc:  denied  { search } for  pid=2071 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861112.280:20): arch=40000003 syscall=5 success=yes exit=3 a0=b7f4291c a1=0 a2=2e3 a3=b7f4291c items=0 ppid=2070 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195861112.780:21): avc:  denied  { search } for  pid=2131 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861112.780:21): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bf922030 a2=4b4b7494 a3=1f items=0 ppid=2130 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195861113.780:22): avc:  denied  { search } for  pid=2160 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861113.780:22): arch=40000003 syscall=5 success=yes exit=3 a0=b7f9e5bc a1=0 a2=26f a3=b7f9e5bc items=0 ppid=2149 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1195861114.779:23): avc:  denied  { search } for  pid=1740 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861114.779:23): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfdda770 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1740 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195861116.279:24): avc:  denied  { search } for  pid=2195 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861116.279:24): arch=40000003 syscall=5 success=yes exit=3 a0=b7f9696b a1=0 a2=1cd a3=b7f9696b items=0 ppid=2179 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=AVC msg=audit(1195861119.779:25): avc:  denied  { search } for  pid=2262 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861119.779:25): arch=40000003 syscall=5 success=yes exit=3 a0=b7fb396b a1=0 a2=1cd a3=b7fb396b items=0 ppid=2261 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195861120.279:26): avc:  denied  { search } for  pid=2303 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861120.279:26): arch=40000003 syscall=5 success=yes exit=3 a0=b7fea0e7 a1=0 a2=32 a3=b7fea0e7 items=0 ppid=2302 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1195861120.778:27): avc:  denied  { search } for  pid=2308 comm="mingetty" name="/" dev=sda9 ino=2 scontext=system_u:system_r:getty_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861120.778:27): arch=40000003 syscall=33 success=no exit=-2 a0=4be4d099 a1=0 a2=4be76ff4 a3=4be4d099 items=0 ppid=1 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mingetty" exe="/sbin/mingetty" subj=system_u:system_r:getty_t:s0 key=(null)
type=AVC msg=audit(1195861121.278:28): avc:  denied  { search } for  pid=2131 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861121.278:28): arch=40000003 syscall=33 success=no exit=-2 a0=bf921328 a1=4 a2=985038d a3=9851a60 items=0 ppid=1 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195861123.778:29): avc:  denied  { search } for  pid=2381 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861123.778:29): arch=40000003 syscall=11 success=yes exit=0 a0=8ff0360 a1=8ff1c68 a2=bfba0180 a3=400 items=0 ppid=2263 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="killall" exe="/usr/bin/killall" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195861126.278:30): avc:  denied  { search } for  pid=2072 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861126.278:30): arch=40000003 syscall=5 success=yes exit=5 a0=bfe7d977 a1=0 a2=0 a3=53 items=0 ppid=1 pid=2072 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195861130.277:31): avc:  denied  { search } for  pid=2072 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861130.277:31): arch=40000003 syscall=5 success=yes exit=5 a0=bfe7d977 a1=0 a2=e a3=53 items=0 ppid=1 pid=2072 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195861384.738:32): avc:  denied  { search } for  pid=2401 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861384.738:32): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfd35248 a2=4be76ff4 a3=3 items=0 ppid=2346 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195861384.738:33): avc:  denied  { search } for  pid=1740 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861384.738:33): arch=40000003 syscall=33 success=no exit=-2 a0=a01d2a8 a1=0 a2=809d4b0 a3=bfdda6e8 items=0 ppid=1 pid=1740 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_AUTH msg=audit(1195861443.729:34): user pid=2353 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1195861443.729:35): user pid=2353 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195861443.729:36): avc:  denied  { search } for  pid=1931 comm="console-kit-dae" name="/" dev=sda9 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861443.729:36): arch=40000003 syscall=5 success=yes exit=9 a0=4b4ad1ac a1=0 a2=3 a3=bfe79528 items=0 ppid=1 pid=1931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=CRED_ACQ msg=audit(1195861443.729:37): user pid=2353 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1195861443.729:38): login pid=2353 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1195861443.729:39): user pid=2353 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195861444.229:40): user pid=2353 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195861444.229:41): avc:  denied  { search } for  pid=2411 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195861444.229:41): arch=40000003 syscall=5 success=yes exit=3 a0=b7f1996b a1=0 a2=1cd a3=b7f1996b items=0 ppid=2179 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=USER_AUTH msg=audit(1195861651.198:42): user pid=2665 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
type=USER_AUTH msg=audit(1195861658.696:43): user pid=2667 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1195861658.696:44): user pid=2667 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_START msg=audit(1195861658.696:45): user pid=2667 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_ACQ msg=audit(1195861658.696:46): user pid=2667 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1195862461.574:47): user pid=2741 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195862461.574:48): user pid=2741 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195862461.574:49): login pid=2741 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195862461.574:50): user pid=2741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195862461.574:51): user pid=2741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195862461.574:52): user pid=2741 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1195862659.544:53): avc:  denied  { search } for  pid=1740 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195862659.544:53): arch=40000003 syscall=33 success=no exit=-2 a0=a02f7c0 a1=0 a2=809d4b0 a3=bfdda6e8 items=0 ppid=1 pid=1740 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195865520.107:54): avc:  denied  { search } for  pid=2955 comm="sendmail" name="/" dev=sda6 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195865520.107:54): arch=40000003 syscall=5 success=yes exit=3 a0=b7fbd947 a1=0 a2=1cc a3=b7fbd947 items=0 ppid=2899 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC msg=audit(1195865520.107:55): avc:  denied  { getattr } for  pid=2955 comm="sendmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195865520.107:55): arch=40000003 syscall=196 success=yes exit=0 a0=bfdb91b8 a1=bfda50a0 a2=3d0ff4 a3=3 items=0 ppid=2899 pid=2955 auid=4294967295 uid=51 gid=51 euid=51 suid=51 fsuid=51 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC_PATH msg=audit(1195865520.107:55):  path="/var"
type=AVC msg=audit(1195865522.107:56): avc:  denied  { search } for  pid=3233 comm="procmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195865522.107:56): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfcca1e8 a2=4be76ff4 a3=3 items=0 ppid=3232 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1195865556.602:57): avc:  denied  { search } for  pid=3404 comm="sendmail" name="/" dev=sda6 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195865556.602:57): arch=40000003 syscall=5 success=yes exit=3 a0=b7fe9947 a1=0 a2=1cc a3=b7fe9947 items=0 ppid=2087 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC msg=audit(1195865556.602:58): avc:  denied  { getattr } for  pid=3404 comm="sendmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195865556.602:58): arch=40000003 syscall=196 success=yes exit=0 a0=bfbc5118 a1=bfbb1000 a2=8c4ff4 a3=3 items=0 ppid=2087 pid=3404 auid=4294967295 uid=51 gid=51 euid=51 suid=51 fsuid=51 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC_PATH msg=audit(1195865556.602:58):  path="/var"
type=AVC msg=audit(1195865556.602:59): avc:  denied  { search } for  pid=3407 comm="procmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195865556.602:59): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bf8b0c68 a2=4be76ff4 a3=3 items=0 ppid=3406 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1195865682.583:60): avc:  denied  { search } for  pid=3411 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195865682.583:60): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bffcdcd8 a2=4be76ff4 a3=3 items=0 ppid=2346 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195865682.583:61): avc:  denied  { search } for  pid=1740 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195865682.583:61): arch=40000003 syscall=33 success=no exit=-2 a0=a02f7f0 a1=0 a2=809d4b0 a3=bfdda6e8 items=0 ppid=1 pid=1740 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_ACCT msg=audit(1195866061.025:62): user pid=3431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195866061.025:63): user pid=3431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195866061.025:64): login pid=3431 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195866061.025:65): user pid=3431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195866061.025:66): user pid=3431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195866061.025:67): user pid=3431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195868661.628:68): user pid=2667 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_END msg=audit(1195868661.628:69): user pid=2667 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=AVC msg=audit(1195868689.124:70): avc:  denied  { search } for  pid=2072 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195868689.124:70): arch=40000003 syscall=5 success=yes exit=5 a0=bfe7d967 a1=0 a2=2f a3=bfe7d967 items=0 ppid=1 pid=2072 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195869652.477:71): avc:  denied  { append } for  pid=4948 comm="pam_console_app" name="kdm.log" dev=sda9 ino=224258 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1195869652.477:71): arch=40000003 syscall=11 success=yes exit=0 a0=9f24a80 a1=9f250a8 a2=bfa6ccc0 a3=9f24ab0 items=0 ppid=2353 pid=4948 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195869652.477:71):  path="/var/log/kdm.log"
type=AVC msg=audit(1195869652.477:72): avc:  denied  { search } for  pid=4949 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195869652.477:72): arch=40000003 syscall=5 success=yes exit=3 a0=b7fd496b a1=0 a2=1cd a3=b7fd496b items=0 ppid=2179 pid=4949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=USER_END msg=audit(1195869652.477:73): user pid=2353 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1195869652.477:74): user pid=2353 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195869654.977:75): avc:  denied  { search } for  pid=2305 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195869654.977:75): arch=40000003 syscall=195 success=yes exit=0 a0=bfb4d380 a1=bfb4d3fc a2=4be76ff4 a3=bfb4d380 items=0 ppid=1 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1195869654.977:76): avc:  denied  { search } for  pid=5015 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195869654.977:76): arch=40000003 syscall=5 success=yes exit=3 a0=b7fb85bc a1=0 a2=26f a3=b7fb85bc items=0 ppid=5005 pid=5015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1195869654.977:77): avc:  denied  { search } for  pid=1740 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195869654.977:77): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfdda770 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1740 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195869655.476:78): avc:  denied  { search } for  pid=2263 comm="NetworkManager" name="/" dev=sda9 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195869655.476:78): arch=40000003 syscall=10 success=yes exit=0 a0=8fe7b10 a1=4be76ff4 a2=8feb120 a3=8feb120 items=0 ppid=1 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195869655.976:79): avc:  denied  { search } for  pid=1867 comm="cupsd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195869655.976:79): arch=40000003 syscall=10 success=yes exit=0 a0=81dbc49e a1=81db31d0 a2=8005bff4 a3=81dbc498 items=0 ppid=1 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195869659.976:80): avc:  denied  { search } for  pid=1604 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195869659.976:80): arch=40000003 syscall=10 success=yes exit=0 a0=8000380c a1=1 a2=8000410c a3=0 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=DAEMON_END msg=audit(1195869660.792:2272) auditd normal halt, sending auid=4294967295 pid=5325 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1530
type=DAEMON_START msg=audit(1195915159.165:5652) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1529 res=success, auditd pid=1529
type=CONFIG_CHANGE msg=audit(1195915158.792:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195915158.792:6): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1195915159.292:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195915159.292:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=AVC msg=audit(1195915159.792:9): avc:  denied  { search } for  pid=1567 comm="klogd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:klogd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915159.792:9): arch=40000003 syscall=5 success=no exit=-2 a0=8000474e a1=0 a2=1b6 a3=80cbb008 items=0 ppid=1566 pid=1567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="klogd" exe="/sbin/klogd" subj=system_u:system_r:klogd_t:s0 key=(null)
type=AVC msg=audit(1195915159.792:10): avc:  denied  { read } for  pid=1602 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195915159.792:10): arch=40000003 syscall=5 success=yes exit=3 a0=89ef80 a1=0 a2=1b6 a3=81dca6a0 items=0 ppid=1601 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195915159.792:11): avc:  denied  { getattr } for  pid=1602 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195915159.792:11): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bfbc557c a2=8c9ff4 a3=0 items=0 ppid=1601 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195915159.792:11):  path="/etc/localtime"
type=AVC msg=audit(1195915159.792:12): avc:  denied  { search } for  pid=1602 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915159.792:12): arch=40000003 syscall=10 success=no exit=-2 a0=8000380c a1=80003828 a2=8000410c a3=bfbc58d6 items=0 ppid=1601 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195915160.792:13): avc:  denied  { search } for  pid=1671 comm="rpc.statd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915160.792:13): arch=40000003 syscall=12 success=yes exit=0 a0=8000939e a1=0 a2=8000b178 a3=bfb7b628 items=0 ppid=1670 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
type=AVC msg=audit(1195915162.791:14): avc:  denied  { search } for  pid=1738 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915162.791:14): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bf82fb38 a2=4be76ff4 a3=4 items=0 ppid=1737 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195915163.291:15): avc:  denied  { search } for  pid=1754 comm="hcid" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915163.291:15): arch=40000003 syscall=5 success=yes exit=3 a0=b7f0f36a a1=0 a2=262 a3=b7f0f36a items=0 ppid=1753 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hcid" exe="/usr/sbin/hcid" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1195915163.291:16): avc:  denied  { search } for  pid=1758 comm="sdpd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915163.291:16): arch=40000003 syscall=5 success=yes exit=3 a0=b7f9436a a1=0 a2=262 a3=b7f9436a items=0 ppid=1757 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sdpd" exe="/usr/sbin/sdpd" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1195915163.791:17): avc:  denied  { search } for  pid=1739 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915163.791:17): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bf830720 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1739 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195915165.291:18): avc:  denied  { search } for  pid=1865 comm="cupsd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915165.291:18): arch=40000003 syscall=5 success=yes exit=3 a0=b7f44d4a a1=0 a2=1e4 a3=b7f44d4a items=0 ppid=1864 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195915166.791:19): avc:  denied  { search } for  pid=1929 comm="console-kit-dae" name="/" dev=sda6 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915166.791:19): arch=40000003 syscall=5 success=yes exit=3 a0=b7fc0ac9 a1=0 a2=233 a3=b7fc0ac9 items=0 ppid=1928 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=AVC msg=audit(1195915167.790:20): avc:  denied  { search } for  pid=2070 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915167.790:20): arch=40000003 syscall=5 success=yes exit=3 a0=b7f5291c a1=0 a2=2e3 a3=b7f5291c items=0 ppid=2069 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195915168.790:21): avc:  denied  { search } for  pid=2130 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915168.790:21): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bffd8560 a2=4b4b7494 a3=1f items=0 ppid=2129 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195915169.790:22): avc:  denied  { search } for  pid=2159 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915169.790:22): arch=40000003 syscall=5 success=yes exit=3 a0=b7fdc5bc a1=0 a2=26f a3=b7fdc5bc items=0 ppid=2148 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1195915170.790:23): avc:  denied  { search } for  pid=1739 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915170.790:23): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bf830720 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1739 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195915172.290:24): avc:  denied  { search } for  pid=2194 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915172.290:24): arch=40000003 syscall=5 success=yes exit=3 a0=b7f3d96b a1=0 a2=1cd a3=b7f3d96b items=0 ppid=2178 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=AVC msg=audit(1195915175.789:25): avc:  denied  { search } for  pid=2261 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915175.789:25): arch=40000003 syscall=5 success=yes exit=3 a0=b7fe296b a1=0 a2=1cd a3=b7fe296b items=0 ppid=2260 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195915176.789:26): avc:  denied  { search } for  pid=2302 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915176.789:26): arch=40000003 syscall=5 success=yes exit=3 a0=b7f870e7 a1=0 a2=32 a3=b7f870e7 items=0 ppid=2301 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1195915177.289:27): avc:  denied  { search } for  pid=2307 comm="mingetty" name="/" dev=sda9 ino=2 scontext=system_u:system_r:getty_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915177.289:27): arch=40000003 syscall=33 success=no exit=-2 a0=4be4d099 a1=0 a2=4be76ff4 a3=4be4d099 items=0 ppid=1 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mingetty" exe="/sbin/mingetty" subj=system_u:system_r:getty_t:s0 key=(null)
type=AVC msg=audit(1195915177.289:28): avc:  denied  { search } for  pid=2130 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915177.289:28): arch=40000003 syscall=33 success=no exit=-2 a0=bffd7858 a1=4 a2=9a4a38d a3=9a4ba60 items=0 ppid=1 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195915179.789:29): avc:  denied  { search } for  pid=2380 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915179.789:29): arch=40000003 syscall=11 success=yes exit=0 a0=87bda98 a1=87c1130 a2=bfc2ba00 a3=400 items=0 ppid=2262 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="killall" exe="/usr/bin/killall" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195915182.288:30): avc:  denied  { search } for  pid=2071 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915182.288:30): arch=40000003 syscall=5 success=yes exit=5 a0=bfc863b7 a1=0 a2=0 a3=53 items=0 ppid=1 pid=2071 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195915186.788:31): avc:  denied  { search } for  pid=2071 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915186.788:31): arch=40000003 syscall=5 success=yes exit=5 a0=bfc863b7 a1=0 a2=e a3=53 items=0 ppid=1 pid=2071 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=USER_AUTH msg=audit(1195915224.282:32): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1195915224.282:33): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195915224.282:34): avc:  denied  { search } for  pid=1739 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915224.282:34): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bf830720 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1739 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195915224.282:35): avc:  denied  { search } for  pid=1930 comm="console-kit-dae" name="/" dev=sda9 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915224.282:35): arch=40000003 syscall=5 success=yes exit=9 a0=4b4ad1ac a1=0 a2=3 a3=bfda1c58 items=0 ppid=1 pid=1930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=CRED_ACQ msg=audit(1195915224.282:36): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1195915224.282:37): login pid=2352 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1195915224.782:38): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195915224.782:39): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195915224.782:40): avc:  denied  { search } for  pid=2396 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915224.782:40): arch=40000003 syscall=5 success=yes exit=3 a0=b7f0e96b a1=0 a2=1cd a3=b7f0e96b items=0 ppid=2178 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=AVC msg=audit(1195915423.751:41): avc:  denied  { search } for  pid=2676 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195915423.751:41): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bf88fd98 a2=4be76ff4 a3=3 items=0 ppid=2345 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=USER_ACCT msg=audit(1195916461.593:42): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195916461.593:43): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195916461.593:44): login pid=2778 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195916461.593:45): user pid=2778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195916461.593:46): user pid=2778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195916461.593:47): user pid=2778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_AUTH msg=audit(1195917921.370:48): user pid=2919 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1195917921.370:49): user pid=2919 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1195917921.370:50): user pid=2919 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1195917921.370:51): user pid=2919 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_DISP msg=audit(1195917921.370:52): user pid=2919 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1195917921.370:53): user pid=2919 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_AUTH msg=audit(1195917924.370:54): user pid=2924 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1195917924.370:55): user pid=2924 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1195917924.370:56): user pid=2924 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1195917924.370:57): user pid=2924 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=AVC msg=audit(1195918012.856:58): avc:  denied  { search } for  pid=1739 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195918012.856:58): arch=40000003 syscall=33 success=no exit=-2 a0=9666d80 a1=0 a2=809d4b0 a3=bf830698 items=0 ppid=1 pid=1739 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195918828.732:59): avc:  denied  { search } for  pid=3350 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195918828.732:59): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfdea2f8 a2=4be76ff4 a3=3 items=0 ppid=2345 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=USER_ACCT msg=audit(1195920061.044:60): user pid=3490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195920061.044:61): user pid=3490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195920061.044:62): login pid=3490 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195920061.044:63): user pid=3490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195920061.044:64): user pid=3490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195920061.044:65): user pid=3490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195923660.995:66): user pid=3660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195923660.995:67): user pid=3660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195923660.995:68): login pid=3660 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195923660.995:69): user pid=3660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195923660.995:70): user pid=3660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195923660.995:71): user pid=3660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195927260.946:72): user pid=3830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195927260.946:73): user pid=3830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195927260.946:74): login pid=3830 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195927260.946:75): user pid=3830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195927260.946:76): user pid=3830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195927260.946:77): user pid=3830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1195928628.737:78): avc:  denied  { search } for  pid=2071 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195928628.737:78): arch=40000003 syscall=5 success=yes exit=5 a0=bfc863a7 a1=0 a2=2f a3=bfc863a7 items=0 ppid=1 pid=2071 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=USER_ACCT msg=audit(1195930861.396:79): user pid=4559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195930861.396:80): user pid=4559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195930861.396:81): login pid=4559 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195930861.396:82): user pid=4559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195930861.396:83): user pid=4559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195930861.396:84): user pid=4559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195934461.347:85): user pid=4845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195934461.347:86): user pid=4845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195934461.347:87): login pid=4845 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195934461.347:88): user pid=4845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195934461.347:89): user pid=4845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195934461.347:90): user pid=4845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195938061.298:91): user pid=5204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195938061.298:92): user pid=5204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195938061.298:93): login pid=5204 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195938061.298:94): user pid=5204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195938061.298:95): user pid=5204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195938061.298:96): user pid=5204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195941661.249:97): user pid=5482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195941661.249:98): user pid=5482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195941661.249:99): login pid=5482 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195941661.249:100): user pid=5482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195941661.249:101): user pid=5482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195941661.249:102): user pid=5482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195945261.200:103): user pid=5652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195945261.200:104): user pid=5652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195945261.200:105): login pid=5652 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195945261.200:106): user pid=5652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195945261.200:107): user pid=5652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195945261.200:108): user pid=5652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1195948861.150:109): user pid=5985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1195948861.150:110): user pid=5985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1195948861.150:111): login pid=5985 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1195948861.150:112): user pid=5985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195948861.150:113): user pid=5985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1195948861.150:114): user pid=5985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1195951894.188:115): user pid=2924 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1195951894.188:116): user pid=2924 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=AVC msg=audit(1195952148.149:117): avc:  denied  { append } for  pid=6708 comm="pam_console_app" name="kdm.log" dev=sda9 ino=224258 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1195952148.149:117): arch=40000003 syscall=11 success=yes exit=0 a0=a024a88 a1=a023948 a2=bff9d460 a3=a024ab8 items=0 ppid=2352 pid=6708 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195952148.149:117):  path="/var/log/kdm.log"
type=USER_END msg=audit(1195952148.149:118): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1195952148.149:119): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195952148.149:120): avc:  denied  { search } for  pid=6709 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195952148.149:120): arch=40000003 syscall=5 success=yes exit=3 a0=b7f3696b a1=0 a2=1cd a3=b7f3696b items=0 ppid=2178 pid=6709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=AVC msg=audit(1195952150.648:121): avc:  denied  { search } for  pid=2304 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195952150.648:121): arch=40000003 syscall=195 success=yes exit=0 a0=bff36f10 a1=bff36f8c a2=4be76ff4 a3=bff36f10 items=0 ppid=1 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1195952150.648:122): avc:  denied  { search } for  pid=6775 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195952150.648:122): arch=40000003 syscall=5 success=yes exit=3 a0=b7f2c5bc a1=0 a2=26f a3=b7f2c5bc items=0 ppid=6765 pid=6775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1195952150.648:123): avc:  denied  { search } for  pid=2162 comm="avahi-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195952150.648:123): arch=40000003 syscall=10 success=yes exit=0 a0=805b413 a1=0 a2=bfcf2dc8 a3=3 items=0 ppid=2161 pid=2162 auid=4294967295 uid=70 gid=70 euid=70 suid=70 fsuid=70 egid=70 sgid=70 fsgid=70 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1195952150.648:124): avc:  denied  { search } for  pid=1739 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195952150.648:124): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bf830720 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1739 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195952151.148:125): avc:  denied  { search } for  pid=2262 comm="NetworkManager" name="/" dev=sda9 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195952151.148:125): arch=40000003 syscall=10 success=yes exit=0 a0=87b8b10 a1=4be76ff4 a2=87bc120 a3=87bc120 items=0 ppid=1 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195952151.648:126): avc:  denied  { search } for  pid=1866 comm="cupsd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195952151.648:126): arch=40000003 syscall=10 success=yes exit=0 a0=81a8249e a1=81a791d0 a2=8005bff4 a3=81a82498 items=0 ppid=1 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195952155.648:127): avc:  denied  { search } for  pid=1603 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195952155.648:127): arch=40000003 syscall=10 success=yes exit=0 a0=8000380c a1=1 a2=8000410c a3=0 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=DAEMON_END msg=audit(1195952156.472:5653) auditd normal halt, sending auid=4294967295 pid=7085 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1529
type=DAEMON_START msg=audit(1195999298.441:6960) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1528 res=success, auditd pid=1528
type=CONFIG_CHANGE msg=audit(1195999298.270:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195999298.270:6): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1195999298.270:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1195999298.270:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=AVC msg=audit(1195999298.769:9): avc:  denied  { search } for  pid=1566 comm="klogd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:klogd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999298.769:9): arch=40000003 syscall=5 success=no exit=-2 a0=8000474e a1=0 a2=1b6 a3=8182e008 items=0 ppid=1565 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="klogd" exe="/sbin/klogd" subj=system_u:system_r:klogd_t:s0 key=(null)
type=AVC msg=audit(1195999299.269:10): avc:  denied  { read } for  pid=1601 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195999299.269:10): arch=40000003 syscall=5 success=yes exit=3 a0=24cf80 a1=0 a2=1b6 a3=81d656a0 items=0 ppid=1600 pid=1601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195999299.269:11): avc:  denied  { getattr } for  pid=1601 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1195999299.269:11): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bf9ebbac a2=277ff4 a3=0 items=0 ppid=1600 pid=1601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1195999299.269:11):  path="/etc/localtime"
type=AVC msg=audit(1195999299.269:12): avc:  denied  { search } for  pid=1601 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999299.269:12): arch=40000003 syscall=10 success=no exit=-2 a0=8000380c a1=80003828 a2=8000410c a3=bf9ebf06 items=0 ppid=1600 pid=1601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195999300.269:13): avc:  denied  { search } for  pid=1670 comm="rpc.statd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999300.269:13): arch=40000003 syscall=12 success=yes exit=0 a0=8000939e a1=0 a2=8000b178 a3=bf96c318 items=0 ppid=1669 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
type=AVC msg=audit(1195999301.769:14): avc:  denied  { search } for  pid=1737 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999301.769:14): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfc13718 a2=4be76ff4 a3=4 items=0 ppid=1736 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195999302.269:15): avc:  denied  { search } for  pid=1753 comm="hcid" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999302.269:15): arch=40000003 syscall=5 success=yes exit=3 a0=b7f5936a a1=0 a2=262 a3=b7f5936a items=0 ppid=1752 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hcid" exe="/usr/sbin/hcid" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1195999302.269:16): avc:  denied  { search } for  pid=1757 comm="sdpd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999302.269:16): arch=40000003 syscall=5 success=yes exit=3 a0=b7f0636a a1=0 a2=262 a3=b7f0636a items=0 ppid=1756 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sdpd" exe="/usr/sbin/sdpd" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1195999302.269:17): avc:  denied  { search } for  pid=1738 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999302.269:17): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfc14300 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1738 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195999304.269:18): avc:  denied  { search } for  pid=1864 comm="cupsd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999304.269:18): arch=40000003 syscall=5 success=yes exit=3 a0=b7f12d4a a1=0 a2=1e4 a3=b7f12d4a items=0 ppid=1863 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1195999305.768:19): avc:  denied  { search } for  pid=1928 comm="console-kit-dae" name="/" dev=sda6 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999305.768:19): arch=40000003 syscall=5 success=yes exit=3 a0=b7f48ac9 a1=0 a2=233 a3=b7f48ac9 items=0 ppid=1927 pid=1928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=AVC msg=audit(1195999307.268:20): avc:  denied  { search } for  pid=2069 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999307.268:20): arch=40000003 syscall=5 success=yes exit=3 a0=b7f0491c a1=0 a2=2e3 a3=b7f0491c items=0 ppid=2068 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195999307.768:21): avc:  denied  { search } for  pid=2129 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999307.768:21): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bf95d7f0 a2=4b4b7494 a3=1f items=0 ppid=2128 pid=2129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195999308.768:22): avc:  denied  { search } for  pid=2158 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999308.768:22): arch=40000003 syscall=5 success=yes exit=3 a0=b7f615bc a1=0 a2=26f a3=b7f615bc items=0 ppid=2147 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1195999309.768:23): avc:  denied  { search } for  pid=1738 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999309.768:23): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfc14300 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1738 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195999311.268:24): avc:  denied  { search } for  pid=2193 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999311.268:24): arch=40000003 syscall=5 success=yes exit=3 a0=b7fce96b a1=0 a2=1cd a3=b7fce96b items=0 ppid=2177 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=AVC msg=audit(1195999314.767:25): avc:  denied  { search } for  pid=2260 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999314.767:25): arch=40000003 syscall=5 success=yes exit=3 a0=b7f8596b a1=0 a2=1cd a3=b7f8596b items=0 ppid=2259 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195999315.767:26): avc:  denied  { search } for  pid=2301 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999315.767:26): arch=40000003 syscall=5 success=yes exit=3 a0=b7fc70e7 a1=0 a2=32 a3=b7fc70e7 items=0 ppid=2300 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1195999316.267:27): avc:  denied  { search } for  pid=2306 comm="mingetty" name="/" dev=sda9 ino=2 scontext=system_u:system_r:getty_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999316.267:27): arch=40000003 syscall=33 success=no exit=-2 a0=4be4d099 a1=0 a2=4be76ff4 a3=4be4d099 items=0 ppid=1 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mingetty" exe="/sbin/mingetty" subj=system_u:system_r:getty_t:s0 key=(null)
type=AVC msg=audit(1195999316.267:28): avc:  denied  { search } for  pid=2129 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999316.267:28): arch=40000003 syscall=33 success=no exit=-2 a0=bf95cae8 a1=4 a2=8e9238d a3=8e93a60 items=0 ppid=1 pid=2129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195999318.766:29): avc:  denied  { search } for  pid=2379 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999318.766:29): arch=40000003 syscall=11 success=yes exit=0 a0=8e1e360 a1=8e1fc68 a2=bfdab390 a3=400 items=0 ppid=2261 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="killall" exe="/usr/bin/killall" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1195999321.266:30): avc:  denied  { search } for  pid=2070 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999321.266:30): arch=40000003 syscall=5 success=yes exit=5 a0=bf9621e7 a1=0 a2=0 a3=53 items=0 ppid=1 pid=2070 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1195999325.265:31): avc:  denied  { search } for  pid=2070 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999325.265:31): arch=40000003 syscall=5 success=yes exit=5 a0=bf9621e7 a1=0 a2=e a3=53 items=0 ppid=1 pid=2070 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=USER_AUTH msg=audit(1195999342.263:32): user pid=2351 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)'
type=USER_AUTH msg=audit(1195999357.261:33): user pid=2351 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1195999357.261:34): user pid=2351 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195999357.261:35): avc:  denied  { search } for  pid=1738 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999357.261:35): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfc14300 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1738 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1195999357.261:36): avc:  denied  { search } for  pid=1929 comm="console-kit-dae" name="/" dev=sda9 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999357.261:36): arch=40000003 syscall=5 success=yes exit=9 a0=4b4ad1ac a1=0 a2=3 a3=bfe5c508 items=0 ppid=1 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=CRED_ACQ msg=audit(1195999357.261:37): user pid=2351 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1195999357.261:38): login pid=2351 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1195999357.261:39): user pid=2351 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1195999357.261:40): user pid=2351 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1195999357.261:41): avc:  denied  { search } for  pid=2395 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999357.261:41): arch=40000003 syscall=5 success=yes exit=3 a0=b7fb196b a1=0 a2=1cd a3=b7fb196b items=0 ppid=2177 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=USER_AUTH msg=audit(1195999451.246:42): user pid=2608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_ACCT msg=audit(1195999451.246:43): user pid=2608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_START msg=audit(1195999451.246:44): user pid=2608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_ACQ msg=audit(1195999451.246:45): user pid=2608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_DISP msg=audit(1195999451.246:46): user pid=2608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_END msg=audit(1195999451.246:47): user pid=2608 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_AUTH msg=audit(1195999453.746:48): user pid=2613 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_ACCT msg=audit(1195999453.746:49): user pid=2613 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_START msg=audit(1195999453.746:50): user pid=2613 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=CRED_ACQ msg=audit(1195999453.746:51): user pid=2613 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=AVC msg=audit(1195999580.726:52): avc:  denied  { search } for  pid=2660 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999580.726:52): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfdc02d8 a2=4be76ff4 a3=3 items=0 ppid=2344 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1195999580.726:53): avc:  denied  { search } for  pid=1738 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1195999580.726:53): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfc14300 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1738 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_ACCT msg=audit(1196002861.726:54): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196002861.726:55): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196002861.726:56): login pid=2896 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196002861.726:57): user pid=2896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196002861.726:58): user pid=2896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196002861.726:59): user pid=2896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1196003180.677:60): avc:  denied  { search } for  pid=2914 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196003180.677:60): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bff82b18 a2=4be76ff4 a3=3 items=0 ppid=2344 pid=2914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1196003715.096:61): avc:  denied  { search } for  pid=3006 comm="sendmail" name="/" dev=sda6 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196003715.096:61): arch=40000003 syscall=5 success=yes exit=3 a0=b7f87947 a1=0 a2=1cc a3=b7f87947 items=0 ppid=2950 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC msg=audit(1196003715.096:62): avc:  denied  { getattr } for  pid=3006 comm="sendmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196003715.096:62): arch=40000003 syscall=196 success=yes exit=0 a0=bfa3a638 a1=bfa26520 a2=b9cff4 a3=3 items=0 ppid=2950 pid=3006 auid=4294967295 uid=51 gid=51 euid=51 suid=51 fsuid=51 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC_PATH msg=audit(1196003715.096:62):  path="/var"
type=AVC msg=audit(1196003717.595:63): avc:  denied  { search } for  pid=3284 comm="procmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196003717.595:63): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfa3dc08 a2=4be76ff4 a3=3 items=0 ppid=3283 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1196003767.088:64): avc:  denied  { search } for  pid=3475 comm="sendmail" name="/" dev=sda6 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196003767.088:64): arch=40000003 syscall=5 success=yes exit=3 a0=b7fc6947 a1=0 a2=1cc a3=b7fc6947 items=0 ppid=2085 pid=3475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC msg=audit(1196003767.088:65): avc:  denied  { getattr } for  pid=3475 comm="sendmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196003767.088:65): arch=40000003 syscall=196 success=yes exit=0 a0=bfb808d8 a1=bfb6c7c0 a2=96dff4 a3=3 items=0 ppid=2085 pid=3475 auid=4294967295 uid=51 gid=51 euid=51 suid=51 fsuid=51 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC_PATH msg=audit(1196003767.088:65):  path="/var"
type=AVC msg=audit(1196003767.088:66): avc:  denied  { search } for  pid=3478 comm="procmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196003767.088:66): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bf842208 a2=4be76ff4 a3=3 items=0 ppid=3477 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1196003986.554:67): avc:  denied  { search } for  pid=3485 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196003986.554:67): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfa62f78 a2=4be76ff4 a3=3 items=0 ppid=2344 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1196006017.744:68): avc:  denied  { search } for  pid=2070 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196006017.744:68): arch=40000003 syscall=5 success=yes exit=5 a0=bf9621d7 a1=0 a2=2f a3=bf9621d7 items=0 ppid=1 pid=2070 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=USER_ACCT msg=audit(1196006460.677:69): user pid=3603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196006460.677:70): user pid=3603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196006460.677:71): login pid=3603 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196006460.677:72): user pid=3603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196006460.677:73): user pid=3603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196006460.677:74): user pid=3603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1196006657.647:75): avc:  denied  { search } for  pid=1738 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196006657.647:75): arch=40000003 syscall=33 success=no exit=-2 a0=9939308 a1=0 a2=809d4b0 a3=bfc14278 items=0 ppid=1 pid=1738 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1196007225.560:76): avc:  denied  { search } for  pid=3654 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196007225.560:76): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfcb91c8 a2=4be76ff4 a3=3 items=0 ppid=2344 pid=3654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1196009921.649:77): avc:  denied  { search } for  pid=2070 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196009921.649:77): arch=40000003 syscall=5 success=yes exit=5 a0=bf9621d7 a1=0 a2=2f a3=bf9621d7 items=0 ppid=1 pid=2070 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=USER_ACCT msg=audit(1196010060.628:78): user pid=3790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196010060.628:79): user pid=3790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196010060.628:80): login pid=3790 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196010060.628:81): user pid=3790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196010061.128:82): user pid=3790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196010061.128:83): user pid=3790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1196013661.078:84): user pid=3963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196013661.078:85): user pid=3963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196013661.078:86): login pid=3963 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196013661.078:87): user pid=3963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196013661.078:88): user pid=3963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196013661.078:89): user pid=3963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1196017261.029:90): user pid=4131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196017261.029:91): user pid=4131 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196017261.029:92): login pid=4131 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196017261.029:93): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196017261.029:94): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196017261.029:95): user pid=4131 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1196020860.980:96): user pid=4306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196020860.980:97): user pid=4306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196020860.980:98): login pid=4306 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196020860.980:99): user pid=4306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196020860.980:100): user pid=4306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196020860.980:101): user pid=4306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1196024460.931:102): user pid=4475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196024460.931:103): user pid=4475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196024460.931:104): login pid=4475 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196024460.931:105): user pid=4475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196024460.931:106): user pid=4475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196024460.931:107): user pid=4475 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_AUTH msg=audit(1196025422.284:108): user pid=4554 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1196025422.284:109): user pid=4554 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1196025422.284:110): user pid=4554 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1196025422.284:111): user pid=4554 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1196028060.882:112): user pid=4751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196028060.882:113): user pid=4751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196028060.882:114): login pid=4751 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196028060.882:115): user pid=4751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196028060.882:116): user pid=4751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196028060.882:117): user pid=4751 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196031548.350:118): user pid=4554 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1196031548.350:119): user pid=4554 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1196031661.332:120): user pid=4960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196031661.332:121): user pid=4960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196031661.332:122): login pid=4960 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196031661.332:123): user pid=4960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196031661.332:124): user pid=4960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196031661.332:125): user pid=4960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196032025.777:126): user pid=2613 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=USER_END msg=audit(1196032025.777:127): user pid=2613 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
type=AVC msg=audit(1196032648.182:128): avc:  denied  { search } for  pid=5323 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196032648.182:128): arch=40000003 syscall=5 success=yes exit=3 a0=b7f7296b a1=0 a2=1cd a3=b7f7296b items=0 ppid=2177 pid=5323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=AVC msg=audit(1196032648.182:129): avc:  denied  { append } for  pid=5322 comm="pam_console_app" name="kdm.log.1" dev=sda9 ino=224258 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1196032648.182:129): arch=40000003 syscall=11 success=yes exit=0 a0=9bacb20 a1=9bad5d8 a2=bfac9610 a3=9bacb50 items=0 ppid=2351 pid=5322 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1196032648.182:129):  path="/var/log/kdm.log.1"
type=USER_END msg=audit(1196032648.182:130): user pid=2351 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1196032648.182:131): user pid=2351 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1196032650.182:132): avc:  denied  { search } for  pid=2303 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196032650.182:132): arch=40000003 syscall=195 success=yes exit=0 a0=bf81c9d0 a1=bf81ca4c a2=4be76ff4 a3=bf81c9d0 items=0 ppid=1 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1196032650.681:133): avc:  denied  { search } for  pid=5389 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196032650.681:133): arch=40000003 syscall=5 success=yes exit=3 a0=b7fb55bc a1=0 a2=26f a3=b7fb55bc items=0 ppid=5379 pid=5389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1196032650.681:134): avc:  denied  { search } for  pid=1738 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196032650.681:134): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfc14300 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1738 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1196032650.681:135): avc:  denied  { search } for  pid=2261 comm="NetworkManager" name="/" dev=sda9 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196032650.681:135): arch=40000003 syscall=10 success=yes exit=0 a0=8e15b10 a1=4be76ff4 a2=8e19120 a3=8e19120 items=0 ppid=1 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1196032651.181:136): avc:  denied  { search } for  pid=1865 comm="cupsd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196032651.181:136): arch=40000003 syscall=10 success=yes exit=0 a0=8173e49e a1=817351d0 a2=8005bff4 a3=8173e498 items=0 ppid=1 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1196032655.681:137): avc:  denied  { search } for  pid=1602 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196032655.681:137): arch=40000003 syscall=10 success=yes exit=0 a0=8000380c a1=1 a2=8000410c a3=0 items=0 ppid=1 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=DAEMON_END msg=audit(1196032656.292:6961) auditd normal halt, sending auid=4294967295 pid=5699 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1528
type=DAEMON_START msg=audit(1196085639.391:5694) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1531 res=success, auditd pid=1531
type=CONFIG_CHANGE msg=audit(1196085639.285:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1196085639.285:6): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1196085639.285:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1196085639.285:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=AVC msg=audit(1196085639.785:9): avc:  denied  { search } for  pid=1569 comm="klogd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:klogd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085639.785:9): arch=40000003 syscall=5 success=no exit=-2 a0=8000474e a1=0 a2=1b6 a3=80bd0008 items=0 ppid=1568 pid=1569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="klogd" exe="/sbin/klogd" subj=system_u:system_r:klogd_t:s0 key=(null)
type=AVC msg=audit(1196085640.285:10): avc:  denied  { read } for  pid=1604 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1196085640.285:10): arch=40000003 syscall=5 success=yes exit=3 a0=469f80 a1=0 a2=1b6 a3=813dd6a0 items=0 ppid=1603 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1196085640.285:11): avc:  denied  { getattr } for  pid=1604 comm="mcstransd" name="localtime" dev=sda7 ino=426025 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=user_u:object_r:etc_t:s0 tclass=file
type=SYSCALL msg=audit(1196085640.285:11): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bffef9ac a2=494ff4 a3=0 items=0 ppid=1603 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1196085640.285:11):  path="/etc/localtime"
type=AVC msg=audit(1196085640.285:12): avc:  denied  { search } for  pid=1604 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085640.285:12): arch=40000003 syscall=10 success=no exit=-2 a0=8000380c a1=80003828 a2=8000410c a3=bffefd06 items=0 ppid=1603 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1196085641.285:13): avc:  denied  { search } for  pid=1673 comm="rpc.statd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085641.285:13): arch=40000003 syscall=12 success=yes exit=0 a0=8000939e a1=0 a2=8000b178 a3=bfa86668 items=0 ppid=1672 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
type=AVC msg=audit(1196085643.285:14): avc:  denied  { search } for  pid=1740 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085643.285:14): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bffe82e8 a2=4be76ff4 a3=4 items=0 ppid=1739 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1196085643.785:15): avc:  denied  { search } for  pid=1756 comm="hcid" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085643.785:15): arch=40000003 syscall=5 success=yes exit=3 a0=b7f6b36a a1=0 a2=262 a3=b7f6b36a items=0 ppid=1755 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hcid" exe="/usr/sbin/hcid" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1196085643.785:16): avc:  denied  { search } for  pid=1760 comm="sdpd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085643.785:16): arch=40000003 syscall=5 success=yes exit=3 a0=b7f5036a a1=0 a2=262 a3=b7f5036a items=0 ppid=1759 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sdpd" exe="/usr/sbin/sdpd" subj=system_u:system_r:bluetooth_t:s0 key=(null)
type=AVC msg=audit(1196085643.785:17): avc:  denied  { search } for  pid=1741 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085643.785:17): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bffe8ed0 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1741 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1196085645.285:18): avc:  denied  { search } for  pid=1867 comm="cupsd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085645.285:18): arch=40000003 syscall=5 success=yes exit=3 a0=b7fdcd4a a1=0 a2=1e4 a3=b7fdcd4a items=0 ppid=1866 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1196085646.784:19): avc:  denied  { search } for  pid=1931 comm="console-kit-dae" name="/" dev=sda6 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085646.784:19): arch=40000003 syscall=5 success=yes exit=3 a0=b7f4fac9 a1=0 a2=233 a3=b7f4fac9 items=0 ppid=1930 pid=1931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=AVC msg=audit(1196085648.284:20): avc:  denied  { search } for  pid=2072 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085648.284:20): arch=40000003 syscall=5 success=yes exit=3 a0=b7f7891c a1=0 a2=2e3 a3=b7f7891c items=0 ppid=2071 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1196085648.784:21): avc:  denied  { search } for  pid=2132 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085648.784:21): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bf9eef70 a2=4b4b7494 a3=1f items=0 ppid=2131 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1196085649.784:22): avc:  denied  { search } for  pid=2161 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085649.784:22): arch=40000003 syscall=5 success=yes exit=3 a0=b7f805bc a1=0 a2=26f a3=b7f805bc items=0 ppid=2150 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1196085651.284:23): avc:  denied  { search } for  pid=1741 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085651.284:23): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bffe8ed0 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1741 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1196085652.783:24): avc:  denied  { search } for  pid=2196 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085652.783:24): arch=40000003 syscall=5 success=yes exit=3 a0=b7fe096b a1=0 a2=1cd a3=b7fe096b items=0 ppid=2180 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=AVC msg=audit(1196085656.283:25): avc:  denied  { search } for  pid=2263 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085656.283:25): arch=40000003 syscall=5 success=yes exit=3 a0=b7fe596b a1=0 a2=1cd a3=b7fe596b items=0 ppid=2262 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1196085656.783:26): avc:  denied  { search } for  pid=2304 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085656.783:26): arch=40000003 syscall=5 success=yes exit=3 a0=b7f660e7 a1=0 a2=32 a3=b7f660e7 items=0 ppid=2303 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1196085657.283:27): avc:  denied  { search } for  pid=2309 comm="mingetty" name="/" dev=sda9 ino=2 scontext=system_u:system_r:getty_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085657.283:27): arch=40000003 syscall=33 success=no exit=-2 a0=4be4d099 a1=0 a2=4be76ff4 a3=4be4d099 items=0 ppid=1 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mingetty" exe="/sbin/mingetty" subj=system_u:system_r:getty_t:s0 key=(null)
type=AVC msg=audit(1196085657.283:28): avc:  denied  { search } for  pid=2132 comm="dhcdbd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085657.283:28): arch=40000003 syscall=33 success=no exit=-2 a0=bf9ee268 a1=4 a2=80ce38d a3=80cfa60 items=0 ppid=1 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhcdbd" exe="/sbin/dhcdbd" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1196085659.782:29): avc:  denied  { search } for  pid=2382 comm="NetworkManager" name="/" dev=sda6 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085659.782:29): arch=40000003 syscall=11 success=yes exit=0 a0=81b9a98 a1=81bd130 a2=bfffcde0 a3=400 items=0 ppid=2264 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="killall" exe="/usr/bin/killall" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=USER_ACCT msg=audit(1196085660.782:30): user pid=2385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196085660.782:31): user pid=2385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196085660.782:32): login pid=2385 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196085660.782:33): user pid=2385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196085660.782:34): user pid=2385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196085660.782:35): user pid=2385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1196085662.782:36): avc:  denied  { search } for  pid=2073 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085662.782:36): arch=40000003 syscall=5 success=yes exit=5 a0=bff9ef57 a1=0 a2=0 a3=53 items=0 ppid=1 pid=2073 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1196085666.781:37): avc:  denied  { search } for  pid=2073 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085666.781:37): arch=40000003 syscall=5 success=yes exit=5 a0=bff9ef57 a1=0 a2=e a3=53 items=0 ppid=1 pid=2073 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=USER_AUTH msg=audit(1196085676.780:38): user pid=2354 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1196085676.780:39): user pid=2354 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1196085676.780:40): avc:  denied  { search } for  pid=1741 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085676.780:40): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bffe8ed0 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1741 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1196085676.780:41): avc:  denied  { search } for  pid=1932 comm="console-kit-dae" name="/" dev=sda9 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085676.780:41): arch=40000003 syscall=5 success=yes exit=9 a0=4b4ad1ac a1=0 a2=3 a3=bfc86338 items=0 ppid=1 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="console-kit-dae" exe="/usr/sbin/console-kit-daemon" subj=system_u:system_r:consolekit_t:s0 key=(null)
type=CRED_ACQ msg=audit(1196085676.780:42): user pid=2354 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1196085676.780:43): login pid=2354 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1196085676.780:44): user pid=2354 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1196085676.780:45): user pid=2354 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1196085676.780:46): avc:  denied  { search } for  pid=2400 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085676.780:46): arch=40000003 syscall=5 success=yes exit=3 a0=b7f0996b a1=0 a2=1cd a3=b7f0996b items=0 ppid=2180 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=USER_AUTH msg=audit(1196085716.774:47): user pid=2626 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
type=USER_AUTH msg=audit(1196085740.270:48): user pid=2627 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1196085740.270:49): user pid=2627 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_START msg=audit(1196085740.770:50): user pid=2627 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_ACQ msg=audit(1196085740.770:51): user pid=2627 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_AUTH msg=audit(1196085875.749:52): user pid=2657 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1196085875.749:53): user pid=2657 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1196085875.749:54): user pid=2657 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1196085875.749:55): user pid=2657 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_DISP msg=audit(1196085875.749:56): user pid=2657 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1196085875.749:57): user pid=2657 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_AUTH msg=audit(1196085878.249:58): user pid=2662 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1196085878.249:59): user pid=2662 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1196085878.249:60): user pid=2662 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1196085878.249:61): user pid=2662 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=AVC msg=audit(1196085917.743:62): avc:  denied  { search } for  pid=1741 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196085917.743:62): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bffe8ed0 a2=4b38bff4 a3=0 items=0 ppid=1 pid=1741 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_AUTH msg=audit(1196088824.300:63): user pid=3350 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
type=USER_ACCT msg=audit(1196089260.733:64): user pid=3696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196089261.233:65): user pid=3696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196089261.233:66): login pid=3696 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196089261.233:67): user pid=3696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196089261.233:68): user pid=3696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196089261.233:69): user pid=3696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1196089324.723:70): avc:  denied  { search } for  pid=3715 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196089324.723:70): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfd53268 a2=4be76ff4 a3=3 items=0 ppid=2347 pid=3715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1196090055.612:71): avc:  denied  { search } for  pid=3946 comm="sendmail" name="/" dev=sda6 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196090055.612:71): arch=40000003 syscall=5 success=yes exit=3 a0=b7fb4947 a1=0 a2=1cc a3=b7fb4947 items=0 ppid=3882 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC msg=audit(1196090055.612:72): avc:  denied  { getattr } for  pid=3946 comm="sendmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196090055.612:72): arch=40000003 syscall=196 success=yes exit=0 a0=bf99ed98 a1=bf98ac80 a2=b4fff4 a3=3 items=0 ppid=3882 pid=3946 auid=4294967295 uid=51 gid=51 euid=51 suid=51 fsuid=51 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
type=AVC_PATH msg=audit(1196090055.612:72):  path="/var"
type=AVC msg=audit(1196090058.611:73): avc:  denied  { search } for  pid=4224 comm="procmail" name="/" dev=sda9 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196090058.611:73): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfeb3908 a2=4be76ff4 a3=3 items=0 ppid=4223 pid=4224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
type=AVC msg=audit(1196090110.103:74): avc:  denied  { search } for  pid=2073 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196090110.103:74): arch=40000003 syscall=5 success=yes exit=5 a0=bff9ef47 a1=0 a2=2f a3=bff9ef47 items=0 ppid=1 pid=2073 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=AVC msg=audit(1196090124.601:75): avc:  denied  { search } for  pid=4401 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196090124.601:75): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bf970688 a2=4be76ff4 a3=3 items=0 ppid=2347 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1196090124.601:76): avc:  denied  { search } for  pid=1741 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196090124.601:76): arch=40000003 syscall=33 success=no exit=-2 a0=822ba48 a1=0 a2=809d4b0 a3=bffe8e48 items=0 ppid=1 pid=1741 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_ACCT msg=audit(1196092861.184:77): user pid=4533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196092861.184:78): user pid=4533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196092861.184:79): login pid=4533 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196092861.184:80): user pid=4533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196092861.184:81): user pid=4533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196092861.184:82): user pid=4533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1196096461.134:83): user pid=4716 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196096461.134:84): user pid=4716 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196096461.134:85): login pid=4716 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196096461.634:86): user pid=4716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196096461.634:87): user pid=4716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196096461.634:88): user pid=4716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1196096537.623:89): avc:  denied  { search } for  pid=1741 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196096537.623:89): arch=40000003 syscall=33 success=no exit=-2 a0=8235930 a1=0 a2=809d4b0 a3=bffe8e48 items=0 ppid=1 pid=1741 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_ACCT msg=audit(1196100061.585:90): user pid=5370 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196100061.585:91): user pid=5370 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196100061.585:92): login pid=5370 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196100061.585:93): user pid=5370 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196100061.585:94): user pid=5370 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196100061.585:95): user pid=5370 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_ACCT msg=audit(1196103661.536:96): user pid=5552 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196103661.536:97): user pid=5552 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196103661.536:98): login pid=5552 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196103661.536:99): user pid=5552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196103661.536:100): user pid=5552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196103661.536:101): user pid=5552 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1196104598.893:102): avc:  denied  { search } for  pid=5692 comm="dhclient-script" name="/" dev=sda9 ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196104598.893:102): arch=40000003 syscall=102 success=no exit=-2 a0=3 a1=bfc6b778 a2=4be76ff4 a3=3 items=0 ppid=2347 pid=5692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient-script" exe="/bin/bash" subj=system_u:system_r:dhcpc_t:s0 key=(null)
type=AVC msg=audit(1196104812.360:103): avc:  denied  { search } for  pid=2073 comm="xfs" name="/" dev=sda6 ino=2 scontext=system_u:system_r:xfs_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196104812.360:103): arch=40000003 syscall=5 success=yes exit=5 a0=bff9ef47 a1=0 a2=2f a3=bff9ef47 items=0 ppid=1 pid=2073 auid=4294967295 uid=43 gid=43 euid=43 suid=43 fsuid=43 egid=43 sgid=43 fsgid=43 tty=(none) comm="xfs" exe="/usr/bin/xfs" subj=system_u:system_r:xfs_t:s0 key=(null)
type=USER_AUTH msg=audit(1196106640.582:104): user pid=5973 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1196106640.582:105): user pid=5973 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1196106640.582:106): user pid=5973 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=USER_ACCT msg=audit(1196107260.987:107): user pid=6083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_ACQ msg=audit(1196107260.987:108): user pid=6083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=LOGIN msg=audit(1196107260.987:109): login pid=6083 uid=0 old auid=4294967295 new auid=0
type=USER_START msg=audit(1196107260.987:110): user pid=6083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=CRED_DISP msg=audit(1196107260.987:111): user pid=6083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=USER_END msg=audit(1196107260.987:112): user pid=6083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
type=AVC msg=audit(1196107349.973:113): avc:  denied  { search } for  pid=1741 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196107349.973:113): arch=40000003 syscall=33 success=no exit=-2 a0=8237f58 a1=0 a2=809d4b0 a3=bffe8e48 items=0 ppid=1 pid=1741 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=USER_AUTH msg=audit(1196107358.972:114): user pid=6112 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
type=USER_ACCT msg=audit(1196107358.972:115): user pid=6112 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
type=USER_START msg=audit(1196107358.972:116): user pid=6112 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
type=CRED_ACQ msg=audit(1196107358.972:117): user pid=6112 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
type=CRED_DISP msg=audit(1196107456.457:118): user pid=6112 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
type=USER_END msg=audit(1196107456.457:119): user pid=6112 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
type=CRED_DISP msg=audit(1196107472.455:120): user pid=2662 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1196107472.455:121): user pid=2662 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1196107523.447:122): user pid=5973 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
type=CRED_DISP msg=audit(1196107542.444:123): user pid=2627 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_END msg=audit(1196107542.444:124): user pid=2627 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=AVC msg=audit(1196107561.941:125): avc:  denied  { append } for  pid=6180 comm="pam_console_app" name="kdm.log" dev=sda9 ino=224267 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1196107561.941:125): arch=40000003 syscall=11 success=yes exit=0 a0=84f1a60 a1=84f08d8 a2=bf8450e0 a3=84f1a90 items=0 ppid=2354 pid=6180 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1196107561.941:125):  path="/var/log/kdm.log"
type=AVC msg=audit(1196107561.941:126): avc:  denied  { search } for  pid=6181 comm="hal-acl-tool" name="/" dev=sda6 ino=2 scontext=system_u:system_r:hald_acl_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196107561.941:126): arch=40000003 syscall=5 success=yes exit=3 a0=b7fc696b a1=0 a2=1cd a3=b7fc696b items=0 ppid=2180 pid=6181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hal-acl-tool" exe="/usr/libexec/hal-acl-tool" subj=system_u:system_r:hald_acl_t:s0 key=(null)
type=USER_END msg=audit(1196107561.941:127): user pid=2354 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1196107561.941:128): user pid=2354 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=AVC msg=audit(1196107563.941:129): avc:  denied  { search } for  pid=2306 comm="smartd" name="/" dev=sda6 ino=2 scontext=system_u:system_r:fsdaemon_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196107563.941:129): arch=40000003 syscall=195 success=yes exit=0 a0=bff09c50 a1=bff09ccc a2=4be76ff4 a3=bff09c50 items=0 ppid=1 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="smartd" exe="/usr/sbin/smartd" subj=system_u:system_r:fsdaemon_t:s0 key=(null)
type=AVC msg=audit(1196107564.441:130): avc:  denied  { search } for  pid=6247 comm="avahi-daemon" name="/" dev=sda6 ino=2 scontext=system_u:system_r:avahi_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196107564.441:130): arch=40000003 syscall=5 success=yes exit=3 a0=b7f9b5bc a1=0 a2=26f a3=b7f9b5bc items=0 ppid=6237 pid=6247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="avahi-daemon" exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0 key=(null)
type=AVC msg=audit(1196107564.441:131): avc:  denied  { search } for  pid=2264 comm="NetworkManager" name="/" dev=sda9 ino=2 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196107564.441:131): arch=40000003 syscall=10 success=yes exit=0 a0=81b4b10 a1=4be76ff4 a2=81b8120 a3=81b8120 items=0 ppid=1 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1196107564.941:132): avc:  denied  { search } for  pid=1868 comm="cupsd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196107564.941:132): arch=40000003 syscall=10 success=yes exit=0 a0=81bbf49e a1=81bb61d0 a2=8005bff4 a3=81bbf498 items=0 ppid=1 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1196107569.440:133): avc:  denied  { search } for  pid=1741 comm="dbus-daemon" name="/" dev=sda9 ino=2 scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196107569.440:133): arch=40000003 syscall=10 success=no exit=-13 a0=820e500 a1=820e500 a2=809d4b0 a3=820e500 items=0 ppid=1 pid=1741 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0 key=(null)
type=AVC msg=audit(1196107569.440:134): avc:  denied  { search } for  pid=1605 comm="mcstransd" name="/" dev=sda9 ino=2 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
type=SYSCALL msg=audit(1196107569.440:134): arch=40000003 syscall=10 success=yes exit=0 a0=8000380c a1=1 a2=8000410c a3=0 items=0 ppid=1 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null)
type=DAEMON_END msg=audit(1196107570.155:5695) auditd normal halt, sending auid=4294967295 pid=6557 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1531
type=DAEMON_START msg=audit(1196107871.940:8201) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1558 res=success, auditd pid=1558
type=CONFIG_CHANGE msg=audit(1196107871.740:52): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1196107871.740:53): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1196107871.740:54): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1196107871.740:55): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=USER_AUTH msg=audit(1196107905.235:56): user pid=2374 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1196107905.235:57): user pid=2374 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_ACQ msg=audit(1196107905.235:58): user pid=2374 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1196107905.235:59): login pid=2374 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1196107905.235:60): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1196107905.235:61): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_AUTH msg=audit(1196110465.844:62): user pid=2934 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1196110465.844:63): user pid=2934 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_START msg=audit(1196110465.844:64): user pid=2934 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_ACQ msg=audit(1196110465.844:65): user pid=2934 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_DISP msg=audit(1196110745.302:66): user pid=2934 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_END msg=audit(1196110745.302:67): user pid=2934 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=AVC msg=audit(1196110831.789:68): avc:  denied  { append } for  pid=3005 comm="pam_console_app" name="kdm.log" dev=sda9 ino=224267 scontext=system_u:system_r:pam_console_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_log_t:s0 tclass=file
type=SYSCALL msg=audit(1196110831.789:68): arch=40000003 syscall=11 success=yes exit=0 a0=86bca80 a1=86bd0a8 a2=bfce4a20 a3=86bcab0 items=0 ppid=2374 pid=3005 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="pam_console_app" exe="/sbin/pam_console_apply" subj=system_u:system_r:pam_console_t:s0-s0:c0.c1023 key=(null)
type=AVC_PATH msg=audit(1196110831.789:68):  path="/var/log/kdm.log"
type=USER_END msg=audit(1196110831.789:69): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session close acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_DISP msg=audit(1196110831.789:70): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=DAEMON_END msg=audit(1196110839.815:8202) auditd normal halt, sending auid=4294967295 pid=3384 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1558
type=DAEMON_START msg=audit(1196110900.555:2156) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=1529 res=success, auditd pid=1529
type=CONFIG_CHANGE msg=audit(1196110900.254:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1196110900.254:5): audit_enabled=1 old=0 by auid=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1196110900.254:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=CONFIG_CHANGE msg=audit(1196110900.254:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
type=USER_AUTH msg=audit(1196110943.247:8): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_ACCT msg=audit(1196110943.247:9): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=CRED_ACQ msg=audit(1196110943.247:10): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=LOGIN msg=audit(1196110943.247:11): login pid=2352 uid=0 old auid=4294967295 new auid=500
type=USER_ROLE_CHANGE msg=audit(1196110943.247:12): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0: exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=? res=success)'
type=USER_START msg=audit(1196110943.247:13): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=wojtek : exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
type=USER_AUTH msg=audit(1196110990.740:14): user pid=2622 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_ACCT msg=audit(1196110990.740:15): user pid=2622 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_START msg=audit(1196110990.740:16): user pid=2622 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_ACQ msg=audit(1196110990.740:17): user pid=2622 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_AUTH msg=audit(1196112368.030:18): user pid=2819 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1196112368.030:19): user pid=2819 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1196112368.030:20): user pid=2819 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1196112368.030:21): user pid=2819 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_DISP msg=audit(1196112368.030:22): user pid=2819 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_END msg=audit(1196112368.030:23): user pid=2819 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_AUTH msg=audit(1196112371.030:24): user pid=2824 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_ACCT msg=audit(1196112371.030:25): user pid=2824 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=USER_START msg=audit(1196112371.030:26): user pid=2824 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
type=CRED_ACQ msg=audit(1196112371.030:27): user pid=2824 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'