All pastes #804768 Raw Edit
Something

public text v1 · immutable
·published 2007-12-03 19:48 UTC
ss=yes exit=0 a0=9f39738 a1=bfe9dd3c a2=644ff4 a3=2 items=0 ppid=2644 pid=2662 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-mount exe=/usr/bin/gnome-mount subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:42:57.786:105) : avc:  denied  { getattr } for  pid=2662 comm=gnome-mount path=/dev/sdb1 dev=tmpfs ino=264 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s15:c0.c255 tclass=blk_file 
----
type=SYSCALL msg=audit(12/03/2007 12:42:57.845:106) : arch=i386 syscall=read success=yes exit=1144 a0=8 a1=bfce03f8 a2=1000 a3=0 items=0 ppid=1 pid=2115 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=console-kit-dae exe=/usr/sbin/console-kit-daemon subj=system_u:system_r:consolekit_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:42:57.845:106) : avc:  denied  { ptrace } for  pid=2115 comm=console-kit-dae scontext=system_u:system_r:consolekit_t:s0-s15:c0.c255 tcontext=staff_u:staff_r:staff_t:s0 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 12:42:58.321:107) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfa41ec0 a2=3e45b0 a3=9e9c05c items=0 ppid=2532 pid=2681 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=pactl exe=/usr/bin/pactl subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:42:58.321:107) : avc:  denied  { write } for  pid=2681 comm=pactl name=native dev=sda1 ino=3112659 scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:object_r:unconfined_tmp_t:s0 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:42:58.581:108) : arch=i386 syscall=open success=yes exit=5 a0=8fc14b0 a1=20002 a2=180 a3=0 items=0 ppid=1 pid=2697 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=escd exe=/usr/lib/esc-1.0.1/escd subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:42:58.581:108) : avc:  denied  { write } for  pid=2697 comm=escd name=coolkeypk11sE-Gate 0 0-500 dev=sda1 ino=458373 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:42:58.729:109) : arch=i386 syscall=execve success=yes exit=0 a0=804d8cd a1=8050c38 a2=bf93e364 a3=0 items=0 ppid=2695 pid=2701 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=pam_timestamp_c exe=/sbin/pam_timestamp_check subj=staff_u:staff_r:pam_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:42:58.729:109) : avc:  denied  { write } for  pid=2701 comm=pam_timestamp_c path=pipe:[11194] dev=pipefs ino=11194 scontext=staff_u:staff_r:pam_t:s0 tcontext=system_u:system_r:xdm_t:s0-s15:c0.c255 tclass=fifo_file 
----
type=SYSCALL msg=audit(12/03/2007 12:42:58.774:110) : arch=i386 syscall=fstat64 success=yes exit=0 a0=2 a1=bfad21a0 a2=28dff4 a3=12bca0 items=0 ppid=2695 pid=2701 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=pam_timestamp_c exe=/sbin/pam_timestamp_check subj=staff_u:staff_r:pam_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:42:58.774:110) : avc:  denied  { getattr } for  pid=2701 comm=pam_timestamp_c path=pipe:[11194] dev=pipefs ino=11194 scontext=staff_u:staff_r:pam_t:s0 tcontext=system_u:system_r:xdm_t:s0-s15:c0.c255 tclass=fifo_file 
----
type=SYSCALL msg=audit(12/03/2007 12:42:58.774:111) : arch=i386 syscall=ioctl success=no exit=-22(Invalid argument) a0=2 a1=5401 a2=bfad1ef0 a3=bfad1ffc items=0 ppid=2695 pid=2701 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=pam_timestamp_c exe=/sbin/pam_timestamp_check subj=staff_u:staff_r:pam_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:42:58.774:111) : avc:  denied  { ioctl } for  pid=2701 comm=pam_timestamp_c path=pipe:[11194] dev=pipefs ino=11194 scontext=staff_u:staff_r:pam_t:s0 tcontext=system_u:system_r:xdm_t:s0-s15:c0.c255 tclass=fifo_file 
----
type=USER_AVC msg=audit(12/03/2007 12:43:00.214:112) : user pid=1996 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Introspectable member=Introspect dest=:1.8 spid=2686 tpid=2462 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:system_r:rpm_t:s0-s15:c0.c255 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=USER_AVC msg=audit(12/03/2007 12:43:00.219:113) : user pid=1996 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.33 spid=2462 tpid=2686 scontext=system_u:system_r:rpm_t:s0-s15:c0.c255 tcontext=staff_u:staff_r:staff_t:s0 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=SYSCALL msg=audit(12/03/2007 12:43:01.669:114) : arch=i386 syscall=mmap2 per=400000 success=yes exit=1122304 a0=0 a1=10000 a2=7 a3=22 items=0 ppid=1 pid=2744 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=mono exe=/usr/bin/mono subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:01.669:114) : avc:  denied  { execmem } for  pid=2744 comm=mono scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:staff_r:staff_t:s0 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 12:43:01.822:115) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfbc9710 a2=bfbc9724 a3=11 items=0 ppid=1 pid=2746 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=fast-user-switc exe=/usr/libexec/fast-user-switch-applet subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:01.822:115) : avc:  denied  { write } for  pid=2746 comm=fast-user-switc name=gdm_socket dev=sda1 ino=426559 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:43:12.302:116) : arch=i386 syscall=open success=yes exit=6 a0=8049e2e a1=8001 a2=4754401c a3=8049e3c items=0 ppid=2780 pid=2783 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=utmp sgid=utmp fsgid=utmp tty=(none) comm=gnome-pty-helpe exe=/usr/lib/vte/gnome-pty-helper subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:12.302:116) : avc:  denied  { write } for  pid=2783 comm=gnome-pty-helpe name=wtmp dev=sda1 ino=426567 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:43:12.302:117) : arch=i386 syscall=fcntl64 success=yes exit=0 a0=6 a1=7 a2=bf81b6dc a3=bf81b650 items=0 ppid=2780 pid=2783 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=utmp sgid=utmp fsgid=utmp tty=(none) comm=gnome-pty-helpe exe=/usr/lib/vte/gnome-pty-helper subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:12.302:117) : avc:  denied  { lock } for  pid=2783 comm=gnome-pty-helpe path=/var/log/wtmp dev=sda1 ino=426567 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:43:36.982:118) : arch=i386 syscall=statfs64 success=yes exit=0 a0=5ecd7e a1=54 a2=bfe95760 a3=5f0e7c items=0 ppid=2784 pid=2811 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=pts0 comm=sudo exe=/usr/bin/sudo subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:36.982:118) : avc:  denied  { getattr } for  pid=2811 comm=sudo name=/ dev=selinuxfs ino=1 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem 
----
type=CRED_ACQ msg=audit(12/03/2007 12:43:37.010:119) : user pid=2811 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:setcred acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 12:43:37.011:120) : arch=i386 syscall=keyctl success=yes exit=275209667 a0=0 a1=fffffffd a2=0 a3=0 items=0 ppid=2784 pid=2811 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=pts0 comm=sudo exe=/usr/bin/sudo subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:37.011:120) : avc:  denied  { search } for  pid=2811 comm=sudo scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:system_r:xdm_t:s0-s15:c0.c255 tclass=key 
----
type=USER_START msg=audit(12/03/2007 12:43:37.011:121) : user pid=2811 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_open acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_END msg=audit(12/03/2007 12:43:37.011:122) : user pid=2811 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_close acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 12:43:37.012:123) : arch=i386 syscall=access success=yes exit=0 a0=b8e04700 a1=1 a2=b7f081e4 a3=b8e04e70 items=0 ppid=2784 pid=2811 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=sudo exe=/usr/bin/sudo subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:37.012:123) : avc:  denied  { execute } for  pid=2811 comm=sudo name=cat dev=sda1 ino=261923 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file 
----
type=USER_CMD msg=audit(12/03/2007 12:43:37.012:124) : user pid=2811 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='cwd=/home/gmarzot cmd=/bin/cat (terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 12:43:37.012:125) : arch=i386 syscall=execve success=yes exit=0 a0=b8e04700 a1=bfe95898 a2=b8e07230 a3=b7f0a2b0 items=0 ppid=2784 pid=2811 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=cat exe=/bin/cat subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:37.012:125) : avc:  denied  { execute_no_trans } for  pid=2811 comm=sudo path=/bin/cat dev=sda1 ino=261923 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:43:37.012:125) : avc:  denied  { read } for  pid=2811 comm=sudo name=cat dev=sda1 ino=261923 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:43:37.013:126) : arch=i386 syscall=open success=yes exit=3 a0=bfdd5c9a a1=8000 a2=0 a3=8000 items=0 ppid=2784 pid=2811 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=cat exe=/bin/cat subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:43:37.013:126) : avc:  denied  { read } for  pid=2811 comm=cat name=Xorg.0.log.old dev=sda1 ino=2488544 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file 
----
type=CRED_ACQ msg=audit(12/03/2007 12:43:57.717:127) : user pid=2812 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:setcred acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_START msg=audit(12/03/2007 12:43:57.718:128) : user pid=2812 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_open acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_END msg=audit(12/03/2007 12:43:57.718:129) : user pid=2812 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_close acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_CMD msg=audit(12/03/2007 12:43:57.718:130) : user pid=2812 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='cwd=/home/gmarzot cmd=/usr/bin/head (terminal=pts/0 res=success)' 
----
type=CRED_ACQ msg=audit(12/03/2007 12:44:07.597:131) : user pid=2815 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:setcred acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_START msg=audit(12/03/2007 12:44:07.598:132) : user pid=2815 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_open acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_END msg=audit(12/03/2007 12:44:07.598:133) : user pid=2815 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_close acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_CMD msg=audit(12/03/2007 12:44:07.598:134) : user pid=2815 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='cwd=/home/gmarzot cmd=/usr/bin/less (terminal=pts/0 res=success)' 
----
type=CRED_ACQ msg=audit(12/03/2007 12:44:48.244:135) : user pid=2816 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:setcred acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_START msg=audit(12/03/2007 12:44:48.245:136) : user pid=2816 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_open acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_END msg=audit(12/03/2007 12:44:48.245:137) : user pid=2816 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_close acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_CMD msg=audit(12/03/2007 12:44:48.245:138) : user pid=2816 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='cwd=/home/gmarzot cmd=/bin/vi (terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 12:44:48.301:139) : arch=i386 syscall=open success=yes exit=3 a0=80c9361 a1=8000 a2=0 a3=8000 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:44:48.301:139) : avc:  denied  { read } for  pid=2816 comm=vi name=gmarzot dev=sda1 ino=1571335 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:staff_home_dir_t:s0-s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:44:48.301:140) : arch=i386 syscall=stat64 success=yes exit=0 a0=88caa10 a1=bff44c60 a2=644ff4 a3=3 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:44:48.301:140) : avc:  denied  { getattr } for  pid=2816 comm=vi path=/root/xorg.conf.new dev=sda1 ino=131104 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:44:48.325:141) : arch=i386 syscall=access success=yes exit=0 a0=88caaa8 a1=2 a2=1a4 a3=1 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:44:48.325:141) : avc:  denied  { write } for  pid=2816 comm=vi name=xorg.conf.new dev=sda1 ino=131104 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:44:48.325:142) : arch=i386 syscall=open success=yes exit=3 a0=88caaa8 a1=8000 a2=0 a3=8000 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:44:48.325:142) : avc:  denied  { read } for  pid=2816 comm=vi name=xorg.conf.new dev=sda1 ino=131104 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:44:48.325:143) : arch=i386 syscall=open success=yes exit=4 a0=88d7468 a1=80c2 a2=180 a3=80c2 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:44:48.325:143) : avc:  denied  { read write } for  pid=2816 comm=vi name=.xorg.conf.new.swp dev=sda1 ino=131106 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:sysadm_home_dir_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:44:48.325:143) : avc:  denied  { create } for  pid=2816 comm=vi name=.xorg.conf.new.swp scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:sysadm_home_dir_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:44:48.325:143) : avc:  denied  { add_name } for  pid=2816 comm=vi name=.xorg.conf.new.swp scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_dir_t:s0-s15:c0.c255 tclass=dir 
type=AVC msg=audit(12/03/2007 12:44:48.325:143) : avc:  denied  { write } for  pid=2816 comm=vi name=root dev=sda1 ino=130945 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_dir_t:s0-s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:44:48.341:144) : arch=i386 syscall=fstat64 success=yes exit=0 a0=4 a1=bff44618 a2=644ff4 a3=5 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:44:48.341:144) : avc:  denied  { getattr } for  pid=2816 comm=vi path=/root/.xorg.conf.new.swp dev=sda1 ino=131106 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:sysadm_home_dir_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:44:48.341:145) : arch=i386 syscall=unlink success=yes exit=0 a0=88d4d18 a1=16 a2=18 a3=5 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:44:48.341:145) : avc:  denied  { unlink } for  pid=2816 comm=vi name=.xorg.conf.new.swx dev=sda1 ino=131124 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:sysadm_home_dir_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:44:48.341:145) : avc:  denied  { remove_name } for  pid=2816 comm=vi name=.xorg.conf.new.swx dev=sda1 ino=131124 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_dir_t:s0-s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:44:48.342:146) : arch=i386 syscall=chmod success=yes exit=0 a0=88d7468 a1=1a4 a2=1a4 a3=1 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:44:48.342:146) : avc:  denied  { setattr } for  pid=2816 comm=vi name=.xorg.conf.new.swp dev=sda1 ino=131106 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:sysadm_home_dir_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:05.288:147) : arch=i386 syscall=rename success=yes exit=0 a0=88caa90 a1=88da100 a2=88da100 a3=88caa90 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:05.288:147) : avc:  denied  { rename } for  pid=2816 comm=vi name=xorg.conf.new dev=sda1 ino=131104 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:05.290:148) : arch=i386 syscall=setxattr success=yes exit=0 a0=88caa90 a1=ae1ac5 a2=88da228 a3=1f items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:05.290:148) : avc:  denied  { relabelto } for  pid=2816 comm=vi name=xorg.conf.new dev=sda1 ino=131124 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:05.290:148) : avc:  denied  { relabelfrom } for  pid=2816 comm=vi name=xorg.conf.new dev=sda1 ino=131124 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:sysadm_home_dir_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:05.290:149) : arch=i386 syscall=chmod success=yes exit=0 a0=88caa90 a1=81a4 a2=1 a3=0 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:05.290:149) : avc:  denied  { setattr } for  pid=2816 comm=vi name=xorg.conf.new dev=sda1 ino=131124 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:05.290:150) : arch=i386 syscall=unlink success=yes exit=0 a0=88da100 a1=0 a2=1 a3=88da100 items=0 ppid=2784 pid=2816 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=vi exe=/bin/vi subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:05.290:150) : avc:  denied  { unlink } for  pid=2816 comm=vi name=xorg.conf.new~ dev=sda1 ino=131104 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=CRED_ACQ msg=audit(12/03/2007 12:45:09.977:151) : user pid=2817 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:setcred acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_START msg=audit(12/03/2007 12:45:09.978:152) : user pid=2817 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_open acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_END msg=audit(12/03/2007 12:45:09.978:153) : user pid=2817 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_close acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_CMD msg=audit(12/03/2007 12:45:09.978:154) : user pid=2817 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='cwd=/home/gmarzot cmd=/usr/bin/reboot (terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.006:155) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfba7b20 a2=265b68 a3=2b items=0 ppid=2784 pid=2817 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=consolehelper-g exe=/usr/bin/consolehelper-gtk subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.006:155) : avc:  denied  { connectto } for  pid=2817 comm=consolehelper-g path=/tmp/.X11-unix/X0 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 tclass=unix_stream_socket 
type=AVC msg=audit(12/03/2007 12:45:10.006:155) : avc:  denied  { write } for  pid=2817 comm=consolehelper-g name=X0 dev=sda1 ino=3148327 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=sock_file 
type=AVC msg=audit(12/03/2007 12:45:10.006:155) : avc:  denied  { search } for  pid=2817 comm=consolehelper-g name=.X11-unix dev=sda1 ino=3148326 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.006:156) : arch=i386 syscall=access success=yes exit=0 a0=bfba8f3b a1=4 a2=268600 a3=bfba8f3b items=0 ppid=2784 pid=2817 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=consolehelper-g exe=/usr/bin/consolehelper-gtk subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.006:156) : avc:  denied  { read } for  pid=2817 comm=consolehelper-g name=.gdmRPRY2T dev=sda1 ino=2882527 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.006:157) : arch=i386 syscall=fstat64 success=yes exit=0 a0=5 a1=bfba68cc a2=644ff4 a3=9dff7c8 items=0 ppid=2784 pid=2817 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=consolehelper-g exe=/usr/bin/consolehelper-gtk subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.006:157) : avc:  denied  { getattr } for  pid=2817 comm=consolehelper-g path=/tmp/.gdmRPRY2T dev=sda1 ino=2882527 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.022:158) : arch=i386 syscall=execve success=yes exit=0 a0=804bf72 a1=9e1caa0 a2=9e1e330 a3=3 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.022:158) : avc:  denied  { execute_no_trans } for  pid=2818 comm=consolehelper-g path=/usr/sbin/userhelper dev=sda1 ino=1834724 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:userhelper_exec_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.022:158) : avc:  denied  { read } for  pid=2818 comm=consolehelper-g name=userhelper dev=sda1 ino=1834724 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:userhelper_exec_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.022:158) : avc:  denied  { execute } for  pid=2818 comm=consolehelper-g name=userhelper dev=sda1 ino=1834724 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:userhelper_exec_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.050:159) : arch=i386 syscall=open success=yes exit=5 a0=93d1520 a1=2 a2=22 a3=0 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.050:159) : avc:  denied  { read write } for  pid=2818 comm=userhelper name=reboot dev=sda1 ino=5762561 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:userhelper_conf_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.050:159) : avc:  denied  { search } for  pid=2818 comm=userhelper name=console.apps dev=sda1 ino=5761987 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:userhelper_conf_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.070:160) : arch=i386 syscall=fstat64 success=yes exit=0 a0=5 a1=bfa381f0 a2=644ff4 a3=3 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.070:160) : avc:  denied  { getattr } for  pid=2818 comm=userhelper path=/etc/security/console.apps/reboot dev=sda1 ino=5762561 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:userhelper_conf_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.088:161) : arch=i386 syscall=open success=yes exit=5 a0=bfa37158 a1=98800 a2=0 a3=93d3b70 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.088:161) : avc:  denied  { read } for  pid=2818 comm=userhelper name=perms dev=selinuxfs ino=67111300 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.088:162) : arch=i386 syscall=open success=yes exit=5 a0=bfa3718c a1=8002 a2=0 a3=8002 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.088:162) : avc:  denied  { write } for  pid=2818 comm=userhelper name=access dev=selinuxfs ino=6 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.088:163) : arch=i386 syscall=write success=yes exit=68 a0=5 a1=93d5218 a2=44 a3=8 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.088:163) : avc:  denied  { compute_av } for  pid=2818 comm=userhelper scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:security_t:s15:c0.c255 tclass=security 
----
type=USER_AUTH msg=audit(12/03/2007 12:45:10.088:164) : user pid=2818 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:authentication acct=root exe=/usr/sbin/userhelper (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_ACCT msg=audit(12/03/2007 12:45:10.089:165) : user pid=2818 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:accounting acct=root exe=/usr/sbin/userhelper (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.099:166) : arch=i386 syscall=open success=yes exit=5 a0=bfa36ac8 a1=0 a2=1b6 a3=93d4300 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.099:166) : avc:  denied  { read } for  pid=2818 comm=userhelper name=userhelper_context dev=sda1 ino=5763646 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:default_context_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.099:166) : avc:  denied  { search } for  pid=2818 comm=userhelper name=contexts dev=sda1 ino=5763639 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:default_context_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.099:167) : arch=i386 syscall=fstat64 success=yes exit=0 a0=5 a1=bfa36948 a2=644ff4 a3=93d4300 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.099:167) : avc:  denied  { getattr } for  pid=2818 comm=userhelper path=/etc/selinux/refpolicy/contexts/userhelper_context dev=sda1 ino=5763646 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:default_context_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.115:168) : arch=i386 syscall=write success=no exit=-22(Invalid argument) a0=5 a1=93d5218 a2=3a a3=93d3d18 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=userhelper exe=/usr/sbin/userhelper subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.115:168) : avc:  denied  { compute_create } for  pid=2818 comm=userhelper scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:security_t:s15:c0.c255 tclass=security 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.125:169) : arch=i386 syscall=open success=yes exit=4 a0=8d32190 a1=42 a2=1a4 a3=0 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=reboot exe=/sbin/halt subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.125:169) : avc:  denied  { read write } for  pid=2818 comm=reboot name=halt dev=sda1 ino=98213 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:root_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.125:169) : avc:  denied  { create } for  pid=2818 comm=reboot name=halt scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:root_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.125:169) : avc:  denied  { add_name } for  pid=2818 comm=reboot name=halt scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 12:45:10.125:169) : avc:  denied  { write } for  pid=2818 comm=reboot name=/ dev=sda1 ino=2 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.151:170) : arch=i386 syscall=open success=yes exit=3 a0=804bbb8 a1=241 a2=1b6 a3=9d2d008 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=shutdown exe=/sbin/shutdown subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.151:170) : avc:  denied  { write } for  pid=2818 comm=shutdown name=shutdown.pid dev=sda1 ino=426600 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:var_run_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.151:170) : avc:  denied  { create } for  pid=2818 comm=shutdown name=shutdown.pid scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:var_run_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.151:170) : avc:  denied  { add_name } for  pid=2818 comm=shutdown name=shutdown.pid scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:var_run_t:s0-s15:c0.c255 tclass=dir 
type=AVC msg=audit(12/03/2007 12:45:10.151:170) : avc:  denied  { write } for  pid=2818 comm=shutdown name=run dev=sda1 ino=425608 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:var_run_t:s0-s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.152:171) : arch=i386 syscall=fstat64 success=yes exit=0 a0=3 a1=bf8cacd0 a2=644ff4 a3=9d2d008 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=shutdown exe=/sbin/shutdown subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.152:171) : avc:  denied  { getattr } for  pid=2818 comm=shutdown path=/var/run/shutdown.pid dev=sda1 ino=426600 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:var_run_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.153:172) : arch=i386 syscall=unlink success=yes exit=0 a0=804bbb8 a1=1 a2=36 a3=4ecca0 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=shutdown exe=/sbin/shutdown subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.153:172) : avc:  denied  { unlink } for  pid=2818 comm=shutdown name=shutdown.pid dev=sda1 ino=426600 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:object_r:var_run_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.153:172) : avc:  denied  { remove_name } for  pid=2818 comm=shutdown name=shutdown.pid dev=sda1 ino=426600 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:var_run_t:s0-s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.153:173) : arch=i386 syscall=stat64 success=yes exit=0 a0=bf8cb1f2 a1=bf8cb010 a2=644ff4 a3=3 items=0 ppid=2818 pid=2819 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=shutdown exe=/sbin/shutdown subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.153:173) : avc:  denied  { getattr } for  pid=2819 comm=shutdown path=/dev/tty7 dev=tmpfs ino=213 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.153:174) : arch=i386 syscall=open success=yes exit=4 a0=bf8cb1f2 a1=901 a2=bf8cb144 a3=9d2f3b1 items=0 ppid=2818 pid=2819 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=shutdown exe=/sbin/shutdown subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.153:174) : avc:  denied  { write } for  pid=2819 comm=shutdown name=tty7 dev=tmpfs ino=213 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.153:175) : arch=i386 syscall=ioctl success=yes exit=0 a0=4 a1=5401 a2=bf8caff8 a3=bf8cb038 items=0 ppid=2818 pid=2819 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=shutdown exe=/sbin/shutdown subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.153:175) : avc:  denied  { sys_tty_config } for  pid=2819 comm=shutdown capability=sys_tty_config scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=staff_u:staff_r:staff_sudo_t:s0 tclass=capability 
type=AVC msg=audit(12/03/2007 12:45:10.153:175) : avc:  denied  { ioctl } for  pid=2819 comm=shutdown path=/dev/tty7 dev=tmpfs ino=213 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.167:176) : arch=i386 syscall=open success=yes exit=3 a0=804bb8b a1=1 a2=0 a3=0 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=shutdown exe=/sbin/shutdown subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.167:176) : avc:  denied  { write } for  pid=2818 comm=shutdown name=initctl dev=tmpfs ino=1515 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:initctl_t:s0 tclass=fifo_file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.167:177) : arch=i386 syscall=execve success=yes exit=0 a0=804bc03 a1=bf8cb3c4 a2=bf8cb714 a3=4ecca0 items=0 ppid=2817 pid=2818 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=init exe=/sbin/init subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.167:177) : avc:  denied  { execute_no_trans } for  pid=2818 comm=shutdown path=/sbin/init dev=sda1 ino=5466956 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:init_exec_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.167:177) : avc:  denied  { read } for  pid=2818 comm=shutdown name=init dev=sda1 ino=5466956 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:init_exec_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.167:177) : avc:  denied  { execute } for  pid=2818 comm=shutdown name=init dev=sda1 ino=5466956 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:init_exec_t:s0 tclass=file 
----
type=AVC msg=audit(12/03/2007 12:45:10.191:178) : avc:  denied  { unlink } for  pid=2607 comm=exe name=native dev=sda1 ino=3112659 scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:object_r:unconfined_tmp_t:s0 tclass=sock_file 
type=AVC msg=audit(12/03/2007 12:45:10.191:178) : avc:  denied  { remove_name } for  pid=2607 comm=exe name=native dev=sda1 ino=3112659 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 12:45:10.191:178) : avc:  denied  { write } for  pid=2607 comm=exe name=pulse-gmarzot dev=sda1 ino=3112714 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=dir 
----
type=AVC msg=audit(12/03/2007 12:45:10.199:179) : avc:  denied  { lock } for  pid=2599 comm=gconfd-2 path=/tmp/gconfd-gmarzot/lock/1t1196703773ut908104u500p2599r798233612k3218586760 (deleted) dev=sda1 ino=3178553 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=staff_u:object_r:user_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.191:178) : arch=i386 syscall=unlink success=yes exit=0 a0=911be88 a1=1 a2=14a4a0 a3=911be00 items=0 ppid=2532 pid=2607 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.199:179) : arch=i386 syscall=fcntl64 success=yes exit=0 a0=c a1=5 a2=bfd7bdac a3=bfd7bdac items=0 ppid=1 pid=2599 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gconfd-2 exe=/usr/libexec/gconfd-2 subj=staff_u:staff_r:staff_gconfd_t:s0 key=(null) 
----
type=AVC msg=audit(12/03/2007 12:45:10.246:180) : avc:  denied  { link } for  pid=2599 comm=gconfd-2 name=ior dev=sda1 ino=3178553 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=staff_u:object_r:user_tmp_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.246:180) : avc:  denied  { add_name } for  pid=2599 comm=gconfd-2 name=ior dev=sda1 ino=3178553 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=user_u:object_r:user_tmp_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 12:45:10.246:180) : avc:  denied  { write } for  pid=2599 comm=gconfd-2 name=lock dev=sda1 ino=3179775 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=user_u:object_r:user_tmp_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 12:45:10.246:180) : avc:  denied  { search } for  pid=2599 comm=gconfd-2 name=lock dev=sda1 ino=3179775 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=user_u:object_r:user_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.248:181) : arch=i386 syscall=open success=yes exit=3 a0=8049e2e a1=8001 a2=47544030 a3=8049e3c items=0 ppid=1 pid=2783 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=utmp sgid=utmp fsgid=utmp tty=(none) comm=gnome-pty-helpe exe=/usr/lib/vte/gnome-pty-helper subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.248:181) : avc:  denied  { write } for  pid=2783 comm=gnome-pty-helpe name=wtmp dev=sda1 ino=426567 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.248:182) : arch=i386 syscall=fcntl64 success=yes exit=0 a0=3 a1=7 a2=bf81c60c a3=bf81c580 items=0 ppid=1 pid=2783 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=utmp sgid=utmp fsgid=utmp tty=(none) comm=gnome-pty-helpe exe=/usr/lib/vte/gnome-pty-helper subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.248:182) : avc:  denied  { lock } for  pid=2783 comm=gnome-pty-helpe path=/var/log/wtmp dev=sda1 ino=426567 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.246:180) : arch=i386 syscall=link success=yes exit=0 a0=9a2a270 a1=9a40e58 a2=c0a334 a3=1 items=0 ppid=1 pid=2599 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gconfd-2 exe=/usr/libexec/gconfd-2 subj=staff_u:staff_r:staff_gconfd_t:s0 key=(null) 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.265:183) : arch=i386 syscall=unlink success=yes exit=0 a0=9a2a270 a1=9a40e58 a2=c0a334 a3=1 items=0 ppid=1 pid=2599 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gconfd-2 exe=/usr/libexec/gconfd-2 subj=staff_u:staff_r:staff_gconfd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.265:183) : avc:  denied  { unlink } for  pid=2599 comm=gconfd-2 name=ior dev=sda1 ino=3178553 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=staff_u:object_r:user_tmp_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 12:45:10.265:183) : avc:  denied  { remove_name } for  pid=2599 comm=gconfd-2 name=ior dev=sda1 ino=3178553 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=user_u:object_r:user_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.265:184) : arch=i386 syscall=rmdir success=yes exit=0 a0=9a2a2c8 a1=9a40e58 a2=646d218 a3=1 items=0 ppid=1 pid=2599 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gconfd-2 exe=/usr/libexec/gconfd-2 subj=staff_u:staff_r:staff_gconfd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.265:184) : avc:  denied  { rmdir } for  pid=2599 comm=gconfd-2 name=lock dev=sda1 ino=3179775 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=user_u:object_r:user_tmp_t:s0 tclass=dir 
----
type=USER_END msg=audit(12/03/2007 12:45:10.290:185) : user pid=2480 uid=root auid=gmarzot subj=system_u:system_r:xdm_t:s0-s15:c0.c255 msg='op=PAM:session_close acct=gmarzot exe=/usr/sbin/gdm-binary (hostname=?, addr=?, terminal=:0 res=success)' 
----
type=CRED_DISP msg=audit(12/03/2007 12:45:10.291:186) : user pid=2480 uid=root auid=gmarzot subj=system_u:system_r:xdm_t:s0-s15:c0.c255 msg='op=PAM:setcred acct=gmarzot exe=/usr/sbin/gdm-binary (hostname=?, addr=?, terminal=:0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 12:45:10.542:187) : arch=i386 syscall=unlink success=yes exit=0 a0=84d5170 a1=84c5a78 a2=646d218 a3=b items=0 ppid=1 pid=2658 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-screensav exe=/usr/bin/gnome-screensaver subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 12:45:10.542:187) : avc:  denied  { unlink } for  pid=2658 comm=gnome-screensav name=linc-a46-0-49042dbf66d5f dev=sda1 ino=3148351 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=sock_file 
type=AVC msg=audit(12/03/2007 12:45:10.542:187) : avc:  denied  { remove_name } for  pid=2658 comm=gnome-screensav name=linc-a46-0-49042dbf66d5f dev=sda1 ino=3148351 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 12:45:10.542:187) : avc:  denied  { write } for  pid=2658 comm=gnome-screensav name=orbit-gmarzot dev=sda1 ino=3148339 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 12:45:10.542:187) : avc:  denied  { search } for  pid=2658 comm=gnome-screensav name=orbit-gmarzot dev=sda1 ino=3148339 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=dir 
----
type=ANOM_ABEND msg=audit(12/03/2007 12:45:10.607:188) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2495 comm=Xorg sig=Aborted
----
type=DAEMON_END msg=audit(12/03/2007 12:45:14.400:3195) : auditd normal halt, sending auid=unset pid=3093 subj=system_u:system_r:initrc_t:s0-s15:c0.c255 res=success, auditd pid=1821 
----
type=DAEMON_START msg=audit(12/03/2007 12:46:05.063:8925) : auditd start, ver=1.6.2, format=raw, auid=unset pid=1825 res=success, auditd pid=1825 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 12:46:05.163:69) : audit_enabled=1 old=0 by auid=unset subj=system_u:system_r:auditd_t:s15:c0.c255 res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 12:46:05.163:70) : audit_enabled=1 old=0 by auid=unset res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 12:46:05.209:71) : audit_backlog_limit=320 old=64 by auid=unset subj=system_u:system_r:auditctl_t:s0-s15:c0.c255 res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 12:46:05.209:72) : audit_backlog_limit=320 old=64 by auid=unset res=1 
----
type=SYSCALL msg=audit(12/03/2007 12:46:05.973:73) : arch=i386 syscall=init_module success=yes exit=0 a0=b7ef5008 a1=261e8 a2=8cf0100 a3=8cf0100 items=0 ppid=1914 pid=1915 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=modprobe exe=/sbin/modprobe subj=system_u:system_r:insmod_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:46:05.973:73) : avc:  denied  { setsched } for  pid=1915 comm=modprobe scontext=system_u:system_r:insmod_t:s0-s15:c0.c255 tcontext=system_u:system_r:kernel_t:s15:c0.c255 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 12:46:10.922:74) : arch=i386 syscall=init_module success=yes exit=0 a0=9fdcaa8 a1=65ec a2=9fd4100 a3=9fd4100 items=0 ppid=2016 pid=2021 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=modprobe exe=/sbin/modprobe subj=system_u:system_r:insmod_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:46:10.922:74) : avc:  denied  { setsched } for  pid=2021 comm=modprobe scontext=system_u:system_r:insmod_t:s0-s15:c0.c255 tcontext=system_u:system_r:kernel_t:s15:c0.c255 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 12:46:15.593:75) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:46:15.593:75) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:23.540:76) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2515 comm=gdmgreeter sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:23.591:77) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2484 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:27.123:78) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2539 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:27.159:79) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2540 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:27.183:80) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2541 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:28.244:81) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2521 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:31.693:82) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2565 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:31.729:83) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2566 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:31.752:84) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2567 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:32.785:85) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2547 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:39.231:86) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2591 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:39.267:87) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2592 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:39.291:88) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2593 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:40.321:89) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2573 comm=Xorg sig=Aborted
----
type=USER_AUTH msg=audit(12/03/2007 12:46:45.698:90) : user pid=2397 uid=root auid=unset subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:authentication acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=USER_ACCT msg=audit(12/03/2007 12:46:45.702:91) : user pid=2397 uid=root auid=unset subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:accounting acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=LOGIN msg=audit(12/03/2007 12:46:45.714:92) : login pid=2397 uid=root old auid=unset new auid=root 
----
type=USER_ROLE_CHANGE msg=audit(12/03/2007 12:46:45.738:93) : user pid=2397 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='pam: default-context=root:sysadm_r:sysadm_t:s0-s15:c0.c255 selected-context=root:sysadm_r:sysadm_t:s0-s15:c0.c255: exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=USER_START msg=audit(12/03/2007 12:46:45.745:94) : user pid=2397 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:session_open acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=CRED_ACQ msg=audit(12/03/2007 12:46:45.746:95) : user pid=2397 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:setcred acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=USER_LOGIN msg=audit(12/03/2007 12:46:45.747:96) : user pid=2397 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='uid=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:50.795:97) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2658 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:50.832:98) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2659 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:50.856:99) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2660 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:46:51.886:100) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2639 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:47:07.338:101) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2687 comm=gdmgreeter sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:47:07.377:102) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2669 comm=Xorg sig=Aborted
----
type=SYSCALL msg=audit(12/03/2007 12:47:15.597:103) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:47:15.597:103) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:48:15.598:104) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:48:15.598:104) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:12.627:105) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2756 comm=gdmgreeter sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:12.670:106) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2738 comm=Xorg sig=Aborted
----
type=SYSCALL msg=audit(12/03/2007 12:49:15.598:107) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:49:15.598:107) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:16.113:108) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2781 comm=gdmgreeter sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:16.156:109) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2763 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:19.612:110) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2807 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:19.649:111) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2808 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:19.673:112) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2809 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:20.707:113) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2788 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:24.165:114) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2835 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:24.201:115) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2836 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:24.226:116) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2837 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:25.260:117) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2816 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:30.718:118) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2863 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:30.754:119) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2864 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:30.778:120) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2865 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:31.813:121) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2844 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:42.267:122) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2893 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:42.304:123) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2894 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:42.328:124) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2895 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:43.359:125) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2874 comm=Xorg sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:57.808:126) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2920 comm=gdmgreeter sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:49:57.846:127) : auid=unset uid=root gid=root subj=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 pid=2902 comm=Xorg sig=Aborted
----
type=SYSCALL msg=audit(12/03/2007 12:50:15.598:128) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:50:15.598:128) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:51:15.598:129) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:51:15.598:129) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:52:15.598:130) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:52:15.598:130) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:53:15.598:131) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:53:15.598:131) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:54:15.598:132) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:54:15.598:132) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:55:15.598:133) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b72316d0 a2=14c118 a3=0 items=0 ppid=1 pid=2270 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:55:15.598:133) : avc:  denied  { write } for  pid=2270 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=CRED_DISP msg=audit(12/03/2007 12:56:07.934:134) : user pid=2397 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:setcred acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=USER_END msg=audit(12/03/2007 12:56:07.946:135) : user pid=2397 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:session_close acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=DAEMON_END msg=audit(12/03/2007 12:56:12.053:8926) : auditd normal halt, sending auid=unset pid=3243 subj=system_u:system_r:initrc_t:s0-s15:c0.c255 res=success, auditd pid=1825 
----
type=DAEMON_START msg=audit(12/03/2007 12:57:07.764:7244) : auditd start, ver=1.6.2, format=raw, auid=unset pid=1824 res=success, auditd pid=1824 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 12:57:07.864:69) : audit_enabled=1 old=0 by auid=unset subj=system_u:system_r:auditd_t:s15:c0.c255 res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 12:57:07.864:70) : audit_enabled=1 old=0 by auid=unset res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 12:57:07.919:71) : audit_backlog_limit=320 old=64 by auid=unset subj=system_u:system_r:auditctl_t:s0-s15:c0.c255 res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 12:57:07.919:72) : audit_backlog_limit=320 old=64 by auid=unset res=1 
----
type=SYSCALL msg=audit(12/03/2007 12:57:08.711:73) : arch=i386 syscall=init_module success=yes exit=0 a0=b7f31008 a1=261e8 a2=84b4100 a3=84b4100 items=0 ppid=1913 pid=1914 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=modprobe exe=/sbin/modprobe subj=system_u:system_r:insmod_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:57:08.711:73) : avc:  denied  { setsched } for  pid=1914 comm=modprobe scontext=system_u:system_r:insmod_t:s0-s15:c0.c255 tcontext=system_u:system_r:kernel_t:s15:c0.c255 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 12:57:13.673:74) : arch=i386 syscall=init_module success=yes exit=0 a0=82b3aa8 a1=65ec a2=82ab100 a3=82ab100 items=0 ppid=2015 pid=2020 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=modprobe exe=/sbin/modprobe subj=system_u:system_r:insmod_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:57:13.673:74) : avc:  denied  { setsched } for  pid=2020 comm=modprobe scontext=system_u:system_r:insmod_t:s0-s15:c0.c255 tcontext=system_u:system_r:kernel_t:s15:c0.c255 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 12:57:18.355:75) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b71fd6d0 a2=14c118 a3=0 items=0 ppid=1 pid=2266 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:57:18.355:75) : avc:  denied  { write } for  pid=2266 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:26.600:76) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2518 comm=gdmgreeter sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:30.159:77) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2542 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:30.195:78) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2543 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:30.219:79) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2544 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:33.741:80) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2568 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:33.777:81) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2569 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:33.800:82) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2570 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:41.285:83) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2594 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:41.320:84) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2595 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:41.344:85) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2596 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:53.829:86) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2620 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:53.864:87) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2621 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 12:57:53.889:88) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2622 comm=gdm-binary sig=Aborted
----
type=USER_AUTH msg=audit(12/03/2007 12:58:07.268:89) : user pid=2395 uid=root auid=unset subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:authentication acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=USER_ACCT msg=audit(12/03/2007 12:58:07.272:90) : user pid=2395 uid=root auid=unset subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:accounting acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=LOGIN msg=audit(12/03/2007 12:58:07.289:91) : login pid=2395 uid=root old auid=unset new auid=root 
----
type=USER_ROLE_CHANGE msg=audit(12/03/2007 12:58:07.313:92) : user pid=2395 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='pam: default-context=root:sysadm_r:sysadm_t:s0-s15:c0.c255 selected-context=root:sysadm_r:sysadm_t:s0-s15:c0.c255: exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=USER_START msg=audit(12/03/2007 12:58:07.320:93) : user pid=2395 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:session_open acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=CRED_ACQ msg=audit(12/03/2007 12:58:07.321:94) : user pid=2395 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:setcred acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=USER_LOGIN msg=audit(12/03/2007 12:58:07.322:95) : user pid=2395 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='uid=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=ANOM_ABEND msg=audit(12/03/2007 12:58:12.395:96) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2686 comm=gdmgreeter sig=Aborted
----
type=SYSCALL msg=audit(12/03/2007 12:58:18.359:97) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b71fd6d0 a2=14c118 a3=0 items=0 ppid=1 pid=2266 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:58:18.359:97) : avc:  denied  { write } for  pid=2266 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 12:59:18.359:98) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b71fd6d0 a2=14c118 a3=0 items=0 ppid=1 pid=2266 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 12:59:18.359:98) : avc:  denied  { write } for  pid=2266 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=ANOM_ABEND msg=audit(12/03/2007 13:00:16.658:99) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2759 comm=gdmgreeter sig=Aborted
----
type=SYSCALL msg=audit(12/03/2007 13:00:18.359:100) : arch=i386 syscall=socketcall(connect) success=no exit=-13(Permission denied) a0=3 a1=b71fd6d0 a2=14c118 a3=0 items=0 ppid=1 pid=2266 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:00:18.359:100) : avc:  denied  { write } for  pid=2266 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=ANOM_ABEND msg=audit(12/03/2007 13:00:20.138:101) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2784 comm=gdmgreeter sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 13:00:23.627:102) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2810 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 13:00:23.663:103) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2811 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 13:00:23.688:104) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2812 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 13:00:27.190:105) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2838 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 13:00:27.226:106) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2839 comm=gdm-binary sig=Aborted
----
type=ANOM_ABEND msg=audit(12/03/2007 13:00:27.250:107) : auid=unset uid=gdm gid=gdm subj=system_u:system_r:xdm_t:s0-s15:c0.c255 pid=2840 comm=gdm-binary sig=Aborted
----
type=CRED_DISP msg=audit(12/03/2007 13:00:31.226:108) : user pid=2395 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:setcred acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=USER_END msg=audit(12/03/2007 13:00:31.233:109) : user pid=2395 uid=root auid=root subj=system_u:system_r:local_login_t:s0-s15:c0.c255 msg='op=PAM:session_close acct=root exe=/bin/login (hostname=?, addr=?, terminal=tty1 res=success)' 
----
type=DAEMON_END msg=audit(12/03/2007 13:00:35.353:7245) : auditd normal halt, sending auid=unset pid=3108 subj=system_u:system_r:initrc_t:s0-s15:c0.c255 res=success, auditd pid=1824 
----
type=DAEMON_START msg=audit(12/03/2007 13:01:43.230:3254) : auditd start, ver=1.6.2, format=raw, auid=unset pid=1829 res=success, auditd pid=1829 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 13:01:43.330:22) : audit_enabled=1 old=0 by auid=unset subj=system_u:system_r:auditd_t:s15:c0.c255 res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 13:01:43.330:23) : audit_enabled=1 old=0 by auid=unset res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 13:01:43.376:24) : audit_backlog_limit=320 old=64 by auid=unset subj=system_u:system_r:auditctl_t:s0-s15:c0.c255 res=1 
----
type=CONFIG_CHANGE msg=audit(12/03/2007 13:01:43.376:25) : audit_backlog_limit=320 old=64 by auid=unset res=1 
----
type=SYSCALL msg=audit(12/03/2007 13:01:44.128:26) : arch=i386 syscall=init_module success=yes exit=0 a0=b7ee2008 a1=261e8 a2=9203100 a3=9203100 items=0 ppid=1918 pid=1919 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=modprobe exe=/sbin/modprobe subj=system_u:system_r:insmod_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:01:44.128:26) : avc:  denied  { setsched } for  pid=1919 comm=modprobe scontext=system_u:system_r:insmod_t:s0-s15:c0.c255 tcontext=system_u:system_r:kernel_t:s15:c0.c255 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 13:01:53.479:27) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=b71906d0 a2=14c118 a3=0 items=0 ppid=1 pid=2273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=setroubleshootd exe=/usr/bin/python subj=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:01:53.479:27) : avc:  denied  { write } for  pid=2273 comm=setroubleshootd name=audispd_events dev=sda1 ino=425690 scontext=system_u:system_r:setroubleshootd_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_var_run_t:s15:c0.c255 tclass=sock_file 
----
type=AVC msg=audit(12/03/2007 13:01:53.480:28) : avc:  denied  { write } for  pid=1831 comm=audispd path=socket:[8278] dev=sockfs ino=8278 scontext=system_u:system_r:auditd_t:s15:c0.c255 tcontext=system_u:system_r:auditd_t:s0-s15:c0.c255 tclass=unix_stream_socket 
----
type=USER_AUTH msg=audit(12/03/2007 13:02:10.719:29) : user pid=2475 uid=root auid=unset subj=system_u:system_r:xdm_t:s0-s15:c0.c255 msg='op=PAM:authentication acct=gmarzot exe=/usr/sbin/gdm-binary (hostname=?, addr=?, terminal=:0 res=success)' 
----
type=AVC msg=audit(12/03/2007 13:02:10.719:30) : avc:  denied  { write } for  pid=1831 comm=audispd path=socket:[8278] dev=sockfs ino=8278 scontext=system_u:system_r:auditd_t:s15:c0.c255 tcontext=system_u:system_r:auditd_t:s0-s15:c0.c255 tclass=unix_stream_socket 
----
type=USER_ACCT msg=audit(12/03/2007 13:02:10.726:31) : user pid=2475 uid=root auid=unset subj=system_u:system_r:xdm_t:s0-s15:c0.c255 msg='op=PAM:accounting acct=gmarzot exe=/usr/sbin/gdm-binary (hostname=?, addr=?, terminal=:0 res=success)' 
----
type=CRED_ACQ msg=audit(12/03/2007 13:02:10.727:32) : user pid=2475 uid=root auid=unset subj=system_u:system_r:xdm_t:s0-s15:c0.c255 msg='op=PAM:setcred acct=gmarzot exe=/usr/sbin/gdm-binary (hostname=?, addr=?, terminal=:0 res=success)' 
----
type=LOGIN msg=audit(12/03/2007 13:02:10.734:33) : login pid=2475 uid=root old auid=unset new auid=gmarzot 
----
type=USER_ROLE_CHANGE msg=audit(12/03/2007 13:02:10.770:34) : user pid=2475 uid=root auid=gmarzot subj=system_u:system_r:xdm_t:s0-s15:c0.c255 msg='pam: default-context=staff_u:staff_r:staff_t:s0 selected-context=staff_u:staff_r:staff_t:s0: exe=/usr/sbin/gdm-binary (hostname=?, addr=?, terminal=? res=success)' 
----
type=USER_START msg=audit(12/03/2007 13:02:10.793:35) : user pid=2475 uid=root auid=gmarzot subj=system_u:system_r:xdm_t:s0-s15:c0.c255 msg='op=PAM:session_open acct=gmarzot exe=/usr/sbin/gdm-binary (hostname=?, addr=?, terminal=:0 res=success)' 
----
type=USER_LOGIN msg=audit(12/03/2007 13:02:10.844:36) : user pid=2475 uid=root auid=gmarzot subj=system_u:system_r:xdm_t:s0-s15:c0.c255 msg='uid=gmarzot exe=/usr/sbin/gdm-binary (hostname=trident, addr=?, terminal=:0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 13:02:11.534:37) : arch=i386 syscall=statfs64 success=yes exit=0 a0=61dd7e a1=54 a2=bfe8dd50 a3=621e7c items=0 ppid=2475 pid=2527 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=nobody sgid=nobody fsgid=nobody tty=(none) comm=ssh-agent exe=/usr/bin/ssh-agent subj=staff_u:staff_r:staff_ssh_agent_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:11.534:37) : avc:  denied  { getattr } for  pid=2527 comm=ssh-agent name=/ dev=selinuxfs ino=1 scontext=staff_u:staff_r:staff_ssh_agent_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem 
----
type=SYSCALL msg=audit(12/03/2007 13:02:12.983:38) : arch=i386 syscall=execve success=yes exit=0 a0=b980d2b8 a1=b9806a10 a2=b980d460 a3=b980d2e0 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:12.983:38) : avc:  denied  { execute_no_trans } for  pid=2598 comm=dbus-daemon path=/usr/libexec/gnome-settings-daemon dev=sda1 ino=1850442 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:xpriv_exec_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 13:02:12.983:38) : avc:  denied  { read } for  pid=2598 comm=dbus-daemon name=gnome-settings-daemon dev=sda1 ino=1850442 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:xpriv_exec_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 13:02:12.983:38) : avc:  denied  { execute } for  pid=2598 comm=dbus-daemon name=gnome-settings-daemon dev=sda1 ino=1850442 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:xpriv_exec_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.219:39) : arch=i386 syscall=sched_getparam success=yes exit=0 a0=a26 a1=b7f36cfc a2=692ff4 a3=b7f36af0 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.219:39) : avc:  denied  { getsched } for  pid=2598 comm=gnome-settings- scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.225:40) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfd7fa40 a2=3ecb68 a3=2b items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.225:40) : avc:  denied  { connectto } for  pid=2598 comm=gnome-settings- path=/tmp/.X11-unix/X0 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 tclass=unix_stream_socket 
type=AVC msg=audit(12/03/2007 13:02:13.225:40) : avc:  denied  { write } for  pid=2598 comm=gnome-settings- name=X0 dev=sda1 ino=3148327 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=sock_file 
type=AVC msg=audit(12/03/2007 13:02:13.225:40) : avc:  denied  { search } for  pid=2598 comm=gnome-settings- name=.X11-unix dev=sda1 ino=3148326 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.225:41) : arch=i386 syscall=access success=yes exit=0 a0=bfd80e96 a1=4 a2=182600 a3=bfd80e96 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.225:41) : avc:  denied  { read } for  pid=2598 comm=gnome-settings- name=.gdm0YUR2T dev=sda1 ino=2882527 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.226:42) : arch=i386 syscall=fstat64 success=yes exit=0 a0=8 a1=bfd7e7ec a2=644ff4 a3=8b22ed0 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.226:42) : avc:  denied  { getattr } for  pid=2598 comm=gnome-settings- path=/tmp/.gdm0YUR2T dev=sda1 ino=2882527 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.236:43) : arch=i386 syscall=stat64 success=yes exit=0 a0=8b388c8 a1=bfd7fbe0 a2=644ff4 a3=3 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.236:43) : avc:  denied  { getattr } for  pid=2598 comm=gnome-settings- path=/tmp/orbit-gmarzot dev=sda1 ino=3148330 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.237:44) : arch=i386 syscall=utime success=yes exit=0 a0=8b388b0 a1=bfd7fc34 a2=a71c8c a3=1f4 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.237:44) : avc:  denied  { setattr } for  pid=2598 comm=gnome-settings- name=orbit-gmarzot dev=sda1 ino=3148330 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.241:45) : arch=i386 syscall=open success=yes exit=14 a0=8b3e440 a1=0 a2=1b6 a3=8b3e468 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.241:45) : avc:  denied  { read } for  pid=2598 comm=gnome-settings- name=ior dev=sda1 ino=3148342 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_gconf_tmp_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 13:02:13.241:45) : avc:  denied  { search } for  pid=2598 comm=gnome-settings- name=lock dev=sda1 ino=3148341 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_gconf_tmp_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 13:02:13.241:45) : avc:  denied  { search } for  pid=2598 comm=gnome-settings- name=gconfd-gmarzot dev=sda1 ino=2979278 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.241:46) : arch=i386 syscall=fstat64 success=yes exit=0 a0=e a1=bfd7f228 a2=644ff4 a3=8b3e468 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.241:46) : avc:  denied  { getattr } for  pid=2598 comm=gnome-settings- path=/tmp/gconfd-gmarzot/lock/ior dev=sda1 ino=3148342 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_gconf_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.242:47) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfd7f940 a2=a71c8c a3=0 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.242:47) : avc:  denied  { connectto } for  pid=2598 comm=gnome-settings- path=/tmp/orbit-gmarzot/linc-a22-0-4193fda04c6a scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_gconfd_t:s0 tclass=unix_stream_socket 
type=AVC msg=audit(12/03/2007 13:02:13.242:47) : avc:  denied  { write } for  pid=2598 comm=gnome-settings- name=linc-a22-0-4193fda04c6a dev=sda1 ino=3148339 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.243:48) : arch=i386 syscall=socketcall(bind) success=yes exit=0 a0=2 a1=bfd7f980 a2=a71c8c a3=b7f36ab8 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.243:48) : avc:  denied  { create } for  pid=2598 comm=gnome-settings- name=linc-a26-0-5fd61b083b600 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=sock_file 
type=AVC msg=audit(12/03/2007 13:02:13.243:48) : avc:  denied  { add_name } for  pid=2598 comm=gnome-settings- name=linc-a26-0-5fd61b083b600 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 13:02:13.243:48) : avc:  denied  { write } for  pid=2598 comm=gnome-settings- name=orbit-gmarzot dev=sda1 ino=3148330 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.243:49) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bff6c0a0 a2=a71c8c a3=0 items=0 ppid=1 pid=2594 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gconfd-2 exe=/usr/libexec/gconfd-2 subj=staff_u:staff_r:staff_gconfd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.243:49) : avc:  denied  { connectto } for  pid=2594 comm=gconfd-2 path=/tmp/orbit-gmarzot/linc-a26-0-5fd61b083b600 scontext=staff_u:staff_r:staff_gconfd_t:s0 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=unix_stream_socket 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.246:50) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfd7f5a0 a2=cabff4 a3=15 items=0 ppid=2597 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.246:50) : avc:  denied  { connectto } for  pid=2598 comm=gnome-settings- path= scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=unix_stream_socket 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.280:51) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfec2110 a2=214b68 a3=2b items=0 ppid=2598 pid=2599 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=xrdb exe=/usr/bin/xrdb subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.280:51) : avc:  denied  { connectto } for  pid=2599 comm=xrdb path=/tmp/.X11-unix/X0 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s15:c0.c255 tclass=unix_stream_socket 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.287:52) : arch=i386 syscall=open success=yes exit=20 a0=8b46390 a1=98800 a2=4f8d9c a3=8b45210 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.287:52) : avc:  denied  { read } for  pid=2598 comm=gnome-settings- name=cursor-fonts dev=sda1 ino=1571362 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_home_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.289:53) : arch=i386 syscall=execve success=yes exit=0 a0=8b4568f a1=8b45510 a2=bfd7ffbc a3=bfd80cdd items=0 ppid=2598 pid=2601 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=mkfontdir exe=/bin/bash subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.289:53) : avc:  denied  { read } for  pid=2601 comm=gnome-settings- name=bash dev=sda1 ino=261904 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 13:02:13.289:53) : avc:  denied  { execute } for  pid=2601 comm=gnome-settings- name=bash dev=sda1 ino=261904 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.493:54) : arch=i386 syscall=open success=yes exit=20 a0=8b20360 a1=98800 a2=bfd7fb98 a3=8b20360 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.493:54) : avc:  denied  { read } for  pid=2598 comm=gnome-settings- name=gmarzot dev=sda1 ino=1571335 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_home_dir_t:s0-s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.909:55) : arch=i386 syscall=chown32 success=yes exit=0 a0=bfcbae24 a1=1f4 a2=1f4 a3=ffffffff items=0 ppid=2527 pid=2602 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.909:55) : avc:  denied  { setattr } for  pid=2602 comm=exe name=pulse-gmarzot dev=sda1 ino=3112714 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.910:56) : arch=i386 syscall=open success=yes exit=3 a0=bfcb9d94 a1=28142 a2=180 a3=28142 items=0 ppid=2527 pid=2602 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.910:56) : avc:  denied  { read write } for  pid=2602 comm=exe name=pid dev=sda1 ino=3112533 scontext=staff_u:staff_r:staff_t:s0 tcontext=user_u:object_r:unconfined_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.923:57) : arch=i386 syscall=fcntl64 success=yes exit=0 a0=3 a1=e a2=bfcb9c94 a3=bfcb9c94 items=0 ppid=2527 pid=2602 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.923:57) : avc:  denied  { lock } for  pid=2602 comm=exe path=/tmp/pulse-gmarzot/pid dev=sda1 ino=3112533 scontext=staff_u:staff_r:staff_t:s0 tcontext=user_u:object_r:unconfined_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:13.939:58) : arch=i386 syscall=setrlimit success=yes exit=0 a0=7 a1=bfcbad5c a2=644ff4 a3=7 items=0 ppid=2527 pid=2602 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:13.939:58) : avc:  denied  { setrlimit } for  pid=2602 comm=exe scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:staff_r:staff_t:s0 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.043:59) : arch=i386 syscall=ipc(shmget) success=yes exit=131073 a0=17 a1=0 a2=30000 a3=380 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.043:59) : avc:  denied  { create } for  pid=2598 comm=gnome-settings- key=0 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=shm 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.043:60) : arch=i386 syscall=ipc(shmat) success=yes exit=0 a0=15 a1=20001 a2=0 a3=bfd7f798 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.043:60) : avc:  denied  { read write } for  pid=2598 comm=gnome-settings- path=/SYSV00000000 (deleted) dev=tmpfs ino=131073 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:tmpfs_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 13:02:14.043:60) : avc:  denied  { read write } for  pid=2598 comm=gnome-settings- key=0 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=shm 
type=AVC msg=audit(12/03/2007 13:02:14.043:60) : avc:  denied  { unix_read unix_write } for  pid=2598 comm=gnome-settings- key=0 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=shm 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.043:61) : arch=i386 syscall=ipc(shmctl) success=yes exit=0 a0=18 a1=20001 a2=100 a3=0 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.043:61) : avc:  denied  { destroy } for  pid=2598 comm=gnome-settings- key=0 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=shm 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.078:62) : arch=i386 syscall=fstat64 success=yes exit=0 a0=15 a1=bfd7f79c a2=644ff4 a3=15 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.078:62) : avc:  denied  { getattr } for  pid=2598 comm=gnome-settings- path=inotify dev=inotifyfs ino=1 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:inotifyfs_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.086:63) : arch=i386 syscall=open success=yes exit=22 a0=45f85f a1=0 a2=1b6 a3=8b60ce0 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.086:63) : avc:  denied  { read } for  pid=2598 comm=gnome-settings- name=mtab dev=sda1 ino=5763658 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.086:64) : arch=i386 syscall=fstat64 success=yes exit=0 a0=16 a1=bfd7f194 a2=644ff4 a3=8b60ce0 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.086:64) : avc:  denied  { getattr } for  pid=2598 comm=gnome-settings- path=/etc/mtab dev=sda1 ino=5763658 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.238:65) : arch=i386 syscall=stat64 success=yes exit=0 a0=8b62557 a1=bfd7fc2c a2=644ff4 a3=4 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.238:65) : avc:  denied  { getattr } for  pid=2598 comm=gnome-settings- path=/usr/bin/gnome-screensaver dev=sda1 ino=1845392 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:xpriv_exec_t:s0 tclass=file 
----
type=AVC msg=audit(12/03/2007 13:02:14.288:66) : avc:  denied  { write } for  pid=2602 comm=exe path=anon_inode:[eventfd] dev=anon_inodefs ino=22 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.288:67) : arch=i386 syscall=read success=yes exit=8 a0=c a1=b7b06210 a2=8 a3=8830b20 items=0 ppid=2527 pid=2604 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.288:67) : avc:  denied  { read } for  pid=2604 comm=exe path=anon_inode:[eventfd] dev=anon_inodefs ino=22 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:anon_inodefs_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.288:66) : arch=i386 syscall=write success=yes exit=8 a0=c a1=bfcba680 a2=8 a3=8830b20 items=0 ppid=2527 pid=2602 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.367:68) : arch=i386 syscall=socketcall(bind) success=yes exit=0 a0=2 a1=bfcb9a90 a2=14a4a0 a3=bfcb9acc items=0 ppid=2527 pid=2602 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.367:68) : avc:  denied  { create } for  pid=2602 comm=exe name=native scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:object_r:unconfined_tmp_t:s0 tclass=sock_file 
type=AVC msg=audit(12/03/2007 13:02:14.367:68) : avc:  denied  { add_name } for  pid=2602 comm=exe name=native scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=dir 
type=AVC msg=audit(12/03/2007 13:02:14.367:68) : avc:  denied  { write } for  pid=2602 comm=exe name=pulse-gmarzot dev=sda1 ino=3112714 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.373:69) : arch=i386 syscall=chmod success=yes exit=0 a0=bfcb9b88 a1=1ff a2=14a4a0 a3=bfcb9acc items=0 ppid=2527 pid=2602 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=exe exe=/usr/bin/pulseaudio subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.373:69) : avc:  denied  { setattr } for  pid=2602 comm=exe name=native dev=sda1 ino=3112659 scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:object_r:unconfined_tmp_t:s0 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.460:70) : arch=i386 syscall=open success=yes exit=3 a0=bff7eb84 a1=0 a2=1b6 a3=830c048 items=0 ppid=2598 pid=2606 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=xkbcomp exe=/usr/bin/xkbcomp subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.460:70) : avc:  denied  { read } for  pid=2606 comm=xkbcomp name=fileBt01zf dev=sda1 ino=2882535 scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:object_r:staff_dbusd_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.484:71) : arch=i386 syscall=open success=yes exit=24 a0=bfd7fb84 a1=0 a2=1b6 a3=8b94160 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.484:71) : avc:  denied  { read } for  pid=2598 comm=gnome-settings- name=fileX1UoEs dev=sda1 ino=2882538 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.484:72) : arch=i386 syscall=fstat64 success=yes exit=0 a0=18 a1=bfd7f8cc a2=644ff4 a3=8b94160 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.484:72) : avc:  denied  { getattr } for  pid=2598 comm=gnome-settings- path=/tmp/fileX1UoEs dev=sda1 ino=2882538 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.490:73) : arch=i386 syscall=unlink success=yes exit=0 a0=bfd7fb84 a1=a0 a2=644ff4 a3=bfd7fb84 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.490:73) : avc:  denied  { unlink } for  pid=2598 comm=gnome-settings- name=fileX1UoEs dev=sda1 ino=2882538 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.836:74) : arch=i386 syscall=open success=yes exit=24 a0=bfd7f452 a1=0 a2=1e a3=bfd7f452 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.836:74) : avc:  denied  { read } for  pid=2598 comm=gnome-settings- name=controlC0 dev=tmpfs ino=5715 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.839:75) : arch=i386 syscall=open success=yes exit=24 a0=bfd7f3ca a1=2 a2=2c12678 a3=2 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.839:75) : avc:  denied  { write } for  pid=2598 comm=gnome-settings- name=controlC0 dev=tmpfs ino=5715 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.839:76) : arch=i386 syscall=ioctl success=yes exit=0 a0=18 a1=80045500 a2=bfd7f3c4 a3=2 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.839:76) : avc:  denied  { ioctl } for  pid=2598 comm=gnome-settings- path=/dev/snd/controlC0 dev=tmpfs ino=5715 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.843:77) : arch=i386 syscall=access success=yes exit=0 a0=8bfbe80 a1=6 a2=aaa12c a3=bfd80e73 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.843:77) : avc:  denied  { read } for  pid=2598 comm=gnome-settings- name=socket dev=sda1 ino=3148347 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_tmp_t:s0 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.844:78) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfd7fa10 a2=aaa12c a3=0 items=0 ppid=1 pid=2598 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-settings- exe=/usr/libexec/gnome-settings-daemon subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.844:78) : avc:  denied  { connectto } for  pid=2598 comm=gnome-settings- path=/tmp/.esd-500/socket scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_t:s0 tclass=unix_stream_socket 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.959:79) : arch=i386 syscall=execve success=yes exit=0 a0=617dfd a1=bf87dafc a2=bf8832f0 a3=400 items=0 ppid=2613 pid=2615 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=sh exe=/bin/bash subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.959:79) : avc:  denied  { execute_no_trans } for  pid=2615 comm=xrdb path=/bin/bash dev=sda1 ino=261904 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.961:80) : arch=i386 syscall=stat64 success=yes exit=0 a0=94e09e8 a1=bfc44f40 a2=644ff4 a3=94e09e8 items=0 ppid=2613 pid=2615 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=sh exe=/bin/bash subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.961:80) : avc:  denied  { getattr } for  pid=2615 comm=sh path=/bin/bash dev=sda1 ino=261904 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.997:81) : arch=i386 syscall=open success=yes exit=4 a0=87c0458 a1=0 a2=1b6 a3=87c0480 items=0 ppid=1 pid=2611 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-screensav exe=/usr/bin/gnome-screensaver subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.997:81) : avc:  denied  { read } for  pid=2611 comm=gnome-screensav name=ior dev=sda1 ino=3148342 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_gconf_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:14.998:82) : arch=i386 syscall=fstat64 success=yes exit=0 a0=4 a1=bfa11048 a2=644ff4 a3=87c0480 items=0 ppid=1 pid=2611 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-screensav exe=/usr/bin/gnome-screensaver subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:14.998:82) : avc:  denied  { getattr } for  pid=2611 comm=gnome-screensav path=/tmp/gconfd-gmarzot/lock/ior dev=sda1 ino=3148342 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_gconf_tmp_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:15.031:83) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfa11920 a2=cabff4 a3=1f items=0 ppid=1 pid=2611 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-screensav exe=/usr/bin/gnome-screensaver subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:15.031:83) : avc:  denied  { connectto } for  pid=2611 comm=gnome-screensav path=/var/run/dbus/system_bus_socket scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 tclass=unix_stream_socket 
type=AVC msg=audit(12/03/2007 13:02:15.031:83) : avc:  denied  { write } for  pid=2611 comm=gnome-screensav name=system_bus_socket dev=sda1 ino=426517 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=sock_file 
type=AVC msg=audit(12/03/2007 13:02:15.031:83) : avc:  denied  { search } for  pid=2611 comm=gnome-screensav name=dbus dev=sda1 ino=425691 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:object_r:system_dbusd_var_run_t:s0 tclass=dir 
----
type=USER_AVC msg=audit(12/03/2007 13:02:15.032:84) : user pid=2004 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=2611 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=USER_AVC msg=audit(12/03/2007 13:02:15.034:85) : user pid=2004 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.ConsoleKit.Manager member=GetCurrentSession dest=org.freedesktop.ConsoleKit spid=2611 tpid=2125 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=system_u:system_r:consolekit_t:s0-s15:c0.c255 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=SYSCALL msg=audit(12/03/2007 13:02:15.035:86) : arch=i386 syscall=read success=yes exit=1095 a0=8 a1=bf954838 a2=1000 a3=0 items=0 ppid=1 pid=2125 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=console-kit-dae exe=/usr/sbin/console-kit-daemon subj=system_u:system_r:consolekit_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:15.035:86) : avc:  denied  { ptrace } for  pid=2125 comm=console-kit-dae scontext=system_u:system_r:consolekit_t:s0-s15:c0.c255 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=process 
----
type=USER_AVC msg=audit(12/03/2007 13:02:15.036:87) : user pid=2004 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.13 spid=2125 tpid=2611 scontext=system_u:system_r:consolekit_t:s0-s15:c0.c255 tcontext=staff_u:staff_r:staff_dbusd_t:s0 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=SYSCALL msg=audit(12/03/2007 13:02:19.598:88) : arch=i386 syscall=socketcall(bind) success=yes exit=0 a0=2 a1=bfcd9950 a2=8072740 a3=f items=0 ppid=1 pid=2630 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=vino-server exe=/usr/libexec/vino-server subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:19.598:88) : avc:  denied  { node_bind } for  pid=2630 comm=vino-server src=5900 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:unspec_node_t:s0 tclass=tcp_socket 
type=AVC msg=audit(12/03/2007 13:02:19.598:88) : avc:  denied  { name_bind } for  pid=2630 comm=vino-server src=5900 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:vnc_port_t:s0 tclass=tcp_socket 
----
type=USER_AVC msg=audit(12/03/2007 13:02:19.623:89) : user pid=2004 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.Avahi.Server member=GetAPIVersion dest=org.freedesktop.Avahi spid=2630 tpid=2219 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:system_r:avahi_t:s0-s15:c0.c255 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=USER_AVC msg=audit(12/03/2007 13:02:19.623:90) : user pid=2004 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.14 spid=2219 tpid=2630 scontext=system_u:system_r:avahi_t:s0-s15:c0.c255 tcontext=staff_u:staff_r:staff_t:s0 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=SYSCALL msg=audit(12/03/2007 13:02:20.431:91) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfa46f90 a2=3e45b0 a3=8e3c05c items=0 ppid=2527 pid=2647 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=pactl exe=/usr/bin/pactl subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:20.431:91) : avc:  denied  { write } for  pid=2647 comm=pactl name=native dev=sda1 ino=3112659 scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:object_r:unconfined_tmp_t:s0 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:20.487:92) : arch=i386 syscall=open success=yes exit=5 a0=82764b0 a1=20002 a2=180 a3=0 items=0 ppid=1 pid=2664 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=escd exe=/usr/lib/esc-1.0.1/escd subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:20.487:92) : avc:  denied  { write } for  pid=2664 comm=escd name=coolkeypk11sE-Gate 0 0-500 dev=sda1 ino=458373 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:20.731:93) : arch=i386 syscall=execve success=yes exit=0 a0=804d8cd a1=8050c38 a2=bfd1eca4 a3=0 items=0 ppid=2660 pid=2681 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=pam_timestamp_c exe=/sbin/pam_timestamp_check subj=staff_u:staff_r:pam_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:20.731:93) : avc:  denied  { write } for  pid=2681 comm=pam_timestamp_c path=pipe:[10943] dev=pipefs ino=10943 scontext=staff_u:staff_r:pam_t:s0 tcontext=system_u:system_r:xdm_t:s0-s15:c0.c255 tclass=fifo_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:20.834:94) : arch=i386 syscall=fstat64 success=yes exit=0 a0=2 a1=bfe4c5c0 a2=28dff4 a3=12bca0 items=0 ppid=2660 pid=2681 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=pam_timestamp_c exe=/sbin/pam_timestamp_check subj=staff_u:staff_r:pam_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:20.834:94) : avc:  denied  { getattr } for  pid=2681 comm=pam_timestamp_c path=pipe:[10943] dev=pipefs ino=10943 scontext=staff_u:staff_r:pam_t:s0 tcontext=system_u:system_r:xdm_t:s0-s15:c0.c255 tclass=fifo_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:20.834:95) : arch=i386 syscall=ioctl success=no exit=-22(Invalid argument) a0=2 a1=5401 a2=bfe4c310 a3=bfe4c41c items=0 ppid=2660 pid=2681 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=pam_timestamp_c exe=/sbin/pam_timestamp_check subj=staff_u:staff_r:pam_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:20.834:95) : avc:  denied  { ioctl } for  pid=2681 comm=pam_timestamp_c path=pipe:[10943] dev=pipefs ino=10943 scontext=staff_u:staff_r:pam_t:s0 tcontext=system_u:system_r:xdm_t:s0-s15:c0.c255 tclass=fifo_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:21.072:96) : arch=i386 syscall=lstat64 success=yes exit=0 a0=9de86c0 a1=bfbd7a6c a2=644ff4 a3=2 items=0 ppid=2669 pid=2685 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-mount exe=/usr/bin/gnome-mount subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:21.072:96) : avc:  denied  { getattr } for  pid=2685 comm=gnome-mount path=/dev/sdb1 dev=tmpfs ino=264 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s15:c0.c255 tclass=blk_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:21.132:97) : arch=i386 syscall=read success=yes exit=1144 a0=8 a1=bf954868 a2=1000 a3=0 items=0 ppid=1 pid=2125 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=console-kit-dae exe=/usr/sbin/console-kit-daemon subj=system_u:system_r:consolekit_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:21.132:97) : avc:  denied  { ptrace } for  pid=2125 comm=console-kit-dae scontext=system_u:system_r:consolekit_t:s0-s15:c0.c255 tcontext=staff_u:staff_r:staff_t:s0 tclass=process 
----
type=USER_AVC msg=audit(12/03/2007 13:02:22.886:98) : user pid=2004 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Introspectable member=Introspect dest=:1.8 spid=2651 tpid=2457 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:system_r:rpm_t:s0-s15:c0.c255 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=USER_AVC msg=audit(12/03/2007 13:02:22.899:99) : user pid=2004 uid=dbus auid=unset subj=system_u:system_r:system_dbusd_t:s0-s15:c0.c255 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.33 spid=2457 tpid=2651 scontext=system_u:system_r:rpm_t:s0-s15:c0.c255 tcontext=staff_u:staff_r:staff_t:s0 tclass=dbus : exe=/bin/dbus-daemon (sauid=81, hostname=?, addr=?, terminal=?)' 
----
type=SYSCALL msg=audit(12/03/2007 13:02:25.797:100) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfafa8b0 a2=80c6f9c a3=0 items=0 ppid=2527 pid=2631 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-panel exe=/usr/bin/gnome-panel subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:25.797:100) : avc:  denied  { write } for  pid=2631 comm=gnome-panel name=gdm_socket dev=sda1 ino=426559 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:26.173:101) : arch=i386 syscall=mmap2 per=400000 success=yes exit=1122304 a0=0 a1=10000 a2=7 a3=22 items=0 ppid=1 pid=2742 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=mono exe=/usr/bin/mono subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:26.173:101) : avc:  denied  { execmem } for  pid=2742 comm=mono scontext=staff_u:staff_r:staff_t:s0 tcontext=staff_u:staff_r:staff_t:s0 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 13:02:33.716:102) : arch=i386 syscall=open success=yes exit=6 a0=8049e2e a1=8001 a2=475444a3 a3=8049e3c items=0 ppid=2765 pid=2772 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=utmp sgid=utmp fsgid=utmp tty=(none) comm=gnome-pty-helpe exe=/usr/lib/vte/gnome-pty-helper subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:33.716:102) : avc:  denied  { write } for  pid=2772 comm=gnome-pty-helpe name=wtmp dev=sda1 ino=426567 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:33.717:103) : arch=i386 syscall=fcntl64 success=yes exit=0 a0=6 a1=7 a2=bfe01cbc a3=bfe01c30 items=0 ppid=2765 pid=2772 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=utmp sgid=utmp fsgid=utmp tty=(none) comm=gnome-pty-helpe exe=/usr/lib/vte/gnome-pty-helper subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:33.717:103) : avc:  denied  { lock } for  pid=2772 comm=gnome-pty-helpe path=/var/log/wtmp dev=sda1 ino=426567 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:47.242:104) : arch=i386 syscall=stat64 success=yes exit=0 a0=9506958 a1=bfe645f4 a2=644ff4 a3=2 items=0 ppid=2765 pid=2773 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=pts0 comm=bash exe=/bin/bash subj=staff_u:staff_r:staff_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:47.242:104) : avc:  denied  { getattr } for  pid=2773 comm=bash path=/var/log/audit dev=sda1 ino=425635 scontext=staff_u:staff_r:staff_t:s0 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:53.386:105) : arch=i386 syscall=statfs64 success=yes exit=0 a0=5ecd7e a1=54 a2=bf9a84f0 a3=5f0e7c items=0 ppid=2773 pid=2800 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=pts0 comm=sudo exe=/usr/bin/sudo subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:53.386:105) : avc:  denied  { getattr } for  pid=2800 comm=sudo name=/ dev=selinuxfs ino=1 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem 
----
type=CRED_ACQ msg=audit(12/03/2007 13:02:53.416:106) : user pid=2800 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:setcred acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 13:02:53.417:107) : arch=i386 syscall=keyctl success=yes exit=628648243 a0=0 a1=fffffffd a2=0 a3=0 items=0 ppid=2773 pid=2800 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=pts0 comm=sudo exe=/usr/bin/sudo subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:53.417:107) : avc:  denied  { search } for  pid=2800 comm=sudo scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:system_r:xdm_t:s0-s15:c0.c255 tclass=key 
----
type=USER_START msg=audit(12/03/2007 13:02:53.417:108) : user pid=2800 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_open acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=USER_END msg=audit(12/03/2007 13:02:53.417:109) : user pid=2800 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='op=PAM:session_close acct=root exe=/usr/bin/sudo (hostname=?, addr=?, terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 13:02:53.418:110) : arch=i386 syscall=access success=yes exit=0 a0=b849ed40 a1=1 a2=b7feb1e4 a3=b849ce70 items=0 ppid=2773 pid=2800 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=sudo exe=/usr/bin/sudo subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:53.418:110) : avc:  denied  { execute } for  pid=2800 comm=sudo name=less dev=sda1 ino=1858391 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file 
----
type=USER_CMD msg=audit(12/03/2007 13:02:53.418:111) : user pid=2800 uid=root auid=gmarzot subj=staff_u:staff_r:staff_sudo_t:s0 msg='cwd=/home/gmarzot cmd=/usr/bin/less (terminal=pts/0 res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 13:02:53.418:112) : arch=i386 syscall=execve success=yes exit=0 a0=b849ed40 a1=bf9a8628 a2=b849f230 a3=b7fed2b0 items=0 ppid=2773 pid=2800 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=less exe=/usr/bin/less subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:53.418:112) : avc:  denied  { execute_no_trans } for  pid=2800 comm=sudo path=/usr/bin/less dev=sda1 ino=1858391 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 13:02:53.418:112) : avc:  denied  { read } for  pid=2800 comm=sudo name=less dev=sda1 ino=1858391 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:02:53.469:113) : arch=i386 syscall=stat64 success=yes exit=0 a0=838c510 a1=bf8a4c80 a2=644ff4 a3=838c510 items=0 ppid=2773 pid=2800 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=less exe=/usr/bin/less subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:53.469:113) : avc:  denied  { getattr } for  pid=2800 comm=less path=/var/log/audit/audit.log dev=sda1 ino=426502 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=file 
type=AVC msg=audit(12/03/2007 13:02:53.469:113) : avc:  denied  { search } for  pid=2800 comm=less name=audit dev=sda1 ino=425635 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=dir 
type=AVC msg=audit(12/03/2007 13:02:53.469:113) : avc:  denied  { search } for  pid=2800 comm=less name=log dev=sda1 ino=425595 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:var_log_t:s0-s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:02:53.469:114) : arch=i386 syscall=open success=yes exit=4 a0=838c4d0 a1=8000 a2=0 a3=8000 items=0 ppid=2773 pid=2800 auid=gmarzot uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 comm=less exe=/usr/bin/less subj=staff_u:staff_r:staff_sudo_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:02:53.469:114) : avc:  denied  { read } for  pid=2800 comm=less name=audit.log dev=sda1 ino=426502 scontext=staff_u:staff_r:staff_sudo_t:s0 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=file 
----
type=USER_LOGIN msg=audit(12/03/2007 13:04:21.326:115) : user pid=2803 uid=root auid=unset subj=system_u:system_r:sshd_t:s0-s15:c0.c255 msg='acct="root"  exe=/usr/sbin/sshd (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' 
----
type=USER_LOGIN msg=audit(12/03/2007 13:04:21.328:116) : user pid=2803 uid=root auid=unset subj=system_u:system_r:sshd_t:s0-s15:c0.c255 msg='acct="root"  exe=/usr/sbin/sshd (hostname=?, addr=192.168.1.4, terminal=sshd res=failed)' 
----
type=USER_AUTH msg=audit(12/03/2007 13:04:24.732:117) : user pid=2803 uid=root auid=unset subj=system_u:system_r:sshd_t:s0-s15:c0.c255 msg='op=PAM:authentication acct=root exe=/usr/sbin/sshd (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' 
----
type=USER_ACCT msg=audit(12/03/2007 13:04:24.736:118) : user pid=2803 uid=root auid=unset subj=system_u:system_r:sshd_t:s0-s15:c0.c255 msg='op=PAM:accounting acct=root exe=/usr/sbin/sshd (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' 
----
type=CRED_ACQ msg=audit(12/03/2007 13:04:24.787:119) : user pid=2803 uid=root auid=unset subj=system_u:system_r:sshd_t:s0-s15:c0.c255 msg='op=PAM:setcred acct=root exe=/usr/sbin/sshd (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' 
----
type=LOGIN msg=audit(12/03/2007 13:04:24.789:120) : login pid=2803 uid=root old auid=unset new auid=root 
----
type=USER_START msg=audit(12/03/2007 13:04:24.789:121) : user pid=2803 uid=root auid=root subj=system_u:system_r:sshd_t:s0-s15:c0.c255 msg='op=PAM:session_open acct=root exe=/usr/sbin/sshd (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' 
----
type=USER_LOGIN msg=audit(12/03/2007 13:04:24.833:122) : user pid=2808 uid=root auid=root subj=system_u:system_r:sshd_t:s0-s15:c0.c255 msg='uid=root exe=/usr/sbin/sshd (hostname=192.168.1.4, addr=192.168.1.4, terminal=/dev/pts/1 res=success)' 
----
type=CRED_REFR msg=audit(12/03/2007 13:04:24.835:123) : user pid=2808 uid=root auid=root subj=system_u:system_r:sshd_t:s0-s15:c0.c255 msg='op=PAM:setcred acct=root exe=/usr/sbin/sshd (hostname=192.168.1.4, addr=192.168.1.4, terminal=ssh res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 13:04:31.075:124) : arch=i386 syscall=stat64 success=yes exit=0 a0=9cbe200 a1=bfdacaa8 a2=644ff4 a3=9cbe200 items=0 ppid=2839 pid=2840 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=lesspipe.sh exe=/bin/bash subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:04:31.075:124) : avc:  denied  { getattr } for  pid=2840 comm=lesspipe.sh path=/var/log/audit/audit.log dev=sda1 ino=426502 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=file 
type=AVC msg=audit(12/03/2007 13:04:31.075:124) : avc:  denied  { search } for  pid=2840 comm=lesspipe.sh name=audit dev=sda1 ino=425635 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:04:31.076:125) : arch=i386 syscall=open success=yes exit=4 a0=999c430 a1=8000 a2=0 a3=8000 items=0 ppid=2808 pid=2839 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=less exe=/usr/bin/less subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:04:31.076:125) : avc:  denied  { read } for  pid=2839 comm=less name=audit.log dev=sda1 ino=426502 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:04:51.496:126) : arch=i386 syscall=open success=yes exit=4 a0=99aca00 a1=8241 a2=1b6 a3=999c430 items=0 ppid=2808 pid=2839 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=less exe=/usr/bin/less subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:04:51.496:126) : avc:  denied  { write } for  pid=2839 comm=less name=.lesshst dev=sda1 ino=130976 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:04:51.497:127) : arch=i386 syscall=fchmod success=yes exit=0 a0=4 a1=180 a2=99aca00 a3=999c430 items=0 ppid=2808 pid=2839 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=less exe=/usr/bin/less subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:04:51.497:127) : avc:  denied  { setattr } for  pid=2839 comm=less name=.lesshst dev=sda1 ino=130976 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:05:13.892:128) : arch=i386 syscall=open success=yes exit=3 a0=8055e29 a1=20000 a2=bfdaf7b0 a3=2 items=0 ppid=2808 pid=2842 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:05:13.892:128) : avc:  denied  { read } for  pid=2842 comm=ausearch name=auditd.conf dev=sda1 ino=5761967 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_etc_t:s15:c0.c255 tclass=file 
type=AVC msg=audit(12/03/2007 13:05:13.892:128) : avc:  denied  { search } for  pid=2842 comm=ausearch name=audit dev=sda1 ino=5761966 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_etc_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:05:13.892:129) : arch=i386 syscall=fstat64 success=yes exit=0 a0=3 a1=bfdaf520 a2=644ff4 a3=3 items=0 ppid=2808 pid=2842 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:05:13.892:129) : avc:  denied  { getattr } for  pid=2842 comm=ausearch path=/etc/audit/auditd.conf dev=sda1 ino=5761967 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_etc_t:s15:c0.c255 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 13:05:13.905:130) : arch=i386 syscall=open success=yes exit=4 a0=89169c0 a1=98800 a2=0 a3=89169c0 items=0 ppid=2808 pid=2842 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:05:13.905:130) : avc:  denied  { read } for  pid=2842 comm=ausearch name=audit dev=sda1 ino=425635 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:05:13.905:131) : arch=i386 syscall=fstat64 success=yes exit=0 a0=4 a1=bfdaf48c a2=644ff4 a3=4 items=0 ppid=2808 pid=2842 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:05:13.905:131) : avc:  denied  { getattr } for  pid=2842 comm=ausearch path=/var/log/audit dev=sda1 ino=425635 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:13:51.318:132) : arch=i386 syscall=socketcall(connect) success=yes exit=0 a0=3 a1=bfa10a10 a2=46e110 a3=b143d4 items=0 ppid=1 pid=2622 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-screensav exe=/usr/bin/gnome-screensaver subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:13:51.318:132) : avc:  denied  { connectto } for  pid=2622 comm=gnome-screensav path= scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_t:s0 tclass=unix_stream_socket 
----
type=SYSCALL msg=audit(12/03/2007 13:13:51.415:133) : arch=i386 syscall=open success=yes exit=16 a0=87f1e18 a1=98800 a2=646120 a3=87f1e18 items=0 ppid=1 pid=2622 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-screensav exe=/usr/bin/gnome-screensaver subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:13:51.415:133) : avc:  denied  { read } for  pid=2622 comm=gnome-screensav name=applications dev=sda1 ino=1571373 scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:object_r:staff_home_t:s0 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 13:19:18.898:134) : arch=i386 syscall=statfs64 success=yes exit=0 a0=175d7e a1=54 a2=bf832e20 a3=179e7c items=0 ppid=2868 pid=2870 auid=gmarzot uid=gmarzot gid=gmarzot euid=root suid=root fsuid=root egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=unix_chkpwd exe=/sbin/unix_chkpwd subj=staff_u:staff_r:staff_chkpwd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:19:18.898:134) : avc:  denied  { getattr } for  pid=2870 comm=unix_chkpwd name=/ dev=selinuxfs ino=1 scontext=staff_u:staff_r:staff_chkpwd_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem 
----
type=SYSCALL msg=audit(12/03/2007 13:19:33.220:135) : arch=i386 syscall=kill success=yes exit=0 a0=b34 a1=f a2=b34 a3=88052a0 items=0 ppid=1 pid=2622 auid=gmarzot uid=gmarzot gid=gmarzot euid=gmarzot suid=gmarzot fsuid=gmarzot egid=gmarzot sgid=gmarzot fsgid=gmarzot tty=(none) comm=gnome-screensav exe=/usr/bin/gnome-screensaver subj=staff_u:staff_r:staff_dbusd_t:s0 key=(null) 
type=AVC msg=audit(12/03/2007 13:19:33.220:135) : avc:  denied  { signal } for  pid=2622 comm=gnome-screensav scontext=staff_u:staff_r:staff_dbusd_t:s0 tcontext=staff_u:staff_r:staff_t:s0 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 13:19:33.293:136) : arch=i386 syscall=read success=yes exit=1121 a0=8 a1=bf954868 a2=1000 a3=0 items=0 ppid=1 pid=2125 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=console-kit-dae exe=/usr/sbin/console-kit-daemon subj=system_u:system_r:consolekit_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 13:19:33.293:136) : avc:  denied  { ptrace } for  pid=2125 comm=console-kit-dae scontext=system_u:system_r:consolekit_t:s0-s15:c0.c255 tcontext=staff_u:staff_r:staff_t:s0 tclass=process 
----
type=SYSCALL msg=audit(12/03/2007 14:01:01.971:137) : arch=i386 syscall=execve success=yes exit=0 a0=141a18 a1=bfa4370c a2=143408 a3=400 items=0 ppid=2968 pid=2969 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) comm=unix_update exe=/sbin/unix_update subj=system_u:system_r:crond_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:01:01.971:137) : avc:  denied  { execute_no_trans } for  pid=2969 comm=crond path=/sbin/unix_update dev=sda1 ino=5467011 scontext=system_u:system_r:crond_t:s0-s15:c0.c255 tcontext=system_u:object_r:bin_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 14:01:01.971:137) : avc:  denied  { read } for  pid=2969 comm=crond name=unix_update dev=sda1 ino=5467011 scontext=system_u:system_r:crond_t:s0-s15:c0.c255 tcontext=system_u:object_r:bin_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 14:01:01.971:137) : avc:  denied  { execute } for  pid=2969 comm=crond name=unix_update dev=sda1 ino=5467011 scontext=system_u:system_r:crond_t:s0-s15:c0.c255 tcontext=system_u:object_r:bin_t:s0 tclass=file 
----
type=USER_ACCT msg=audit(12/03/2007 14:01:01.974:138) : user pid=2968 uid=root auid=unset subj=system_u:system_r:crond_t:s0-s15:c0.c255 msg='op=PAM:accounting acct=root exe=/usr/sbin/crond (hostname=?, addr=?, terminal=cron res=success)' 
----
type=SYSCALL msg=audit(12/03/2007 14:05:00.255:139) : arch=i386 syscall=open success=yes exit=4 a0=9f34540 a1=8241 a2=1b6 a3=9f34558 items=0 ppid=2808 pid=2844 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=less exe=/usr/bin/less subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:05:00.255:139) : avc:  denied  { write } for  pid=2844 comm=less name=.lesshst dev=sda1 ino=130976 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 14:05:00.255:140) : arch=i386 syscall=fchmod success=yes exit=0 a0=4 a1=180 a2=9f34540 a3=9f34558 items=0 ppid=2808 pid=2844 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=less exe=/usr/bin/less subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:05:00.255:140) : avc:  denied  { setattr } for  pid=2844 comm=less name=.lesshst dev=sda1 ino=130976 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=root:object_r:sysadm_home_t:s0 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 14:06:00.691:141) : arch=i386 syscall=open success=yes exit=3 a0=8055e29 a1=20000 a2=bfb5dd60 a3=2 items=0 ppid=2808 pid=2986 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:06:00.691:141) : avc:  denied  { read } for  pid=2986 comm=ausearch name=auditd.conf dev=sda1 ino=5761967 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_etc_t:s15:c0.c255 tclass=file 
type=AVC msg=audit(12/03/2007 14:06:00.691:141) : avc:  denied  { search } for  pid=2986 comm=ausearch name=audit dev=sda1 ino=5761966 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_etc_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 14:06:00.691:142) : arch=i386 syscall=fstat64 success=yes exit=0 a0=3 a1=bfb5dad0 a2=644ff4 a3=3 items=0 ppid=2808 pid=2986 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:06:00.691:142) : avc:  denied  { getattr } for  pid=2986 comm=ausearch path=/etc/audit/auditd.conf dev=sda1 ino=5761967 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_etc_t:s15:c0.c255 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 14:06:00.692:143) : arch=i386 syscall=open success=yes exit=4 a0=87bb9c0 a1=98800 a2=0 a3=87bb9c0 items=0 ppid=2808 pid=2986 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:06:00.692:143) : avc:  denied  { read } for  pid=2986 comm=ausearch name=audit dev=sda1 ino=425635 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 14:06:00.692:144) : arch=i386 syscall=fstat64 success=yes exit=0 a0=4 a1=bfb5da3c a2=644ff4 a3=4 items=0 ppid=2808 pid=2986 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:06:00.692:144) : avc:  denied  { getattr } for  pid=2986 comm=ausearch path=/var/log/audit dev=sda1 ino=425635 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 14:06:00.692:145) : arch=i386 syscall=open success=yes exit=4 a0=bfb5dbe3 a1=0 a2=87bb9c0 a3=87bb9c0 items=0 ppid=2808 pid=2986 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:06:00.692:145) : avc:  denied  { read } for  pid=2986 comm=ausearch name=audit.log dev=sda1 ino=426502 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=file 
type=AVC msg=audit(12/03/2007 14:06:00.692:145) : avc:  denied  { search } for  pid=2986 comm=ausearch name=audit dev=sda1 ino=425635 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=dir 
----
type=SYSCALL msg=audit(12/03/2007 14:06:00.693:146) : arch=i386 syscall=fstat64 success=yes exit=0 a0=4 a1=bfb5da40 a2=644ff4 a3=3 items=0 ppid=2808 pid=2986 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=ausearch exe=/sbin/ausearch subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:06:00.693:146) : avc:  denied  { getattr } for  pid=2986 comm=ausearch path=/var/log/audit/audit.log dev=sda1 ino=426502 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=system_u:object_r:auditd_log_t:s15:c0.c255 tclass=file 
----
type=SYSCALL msg=audit(12/03/2007 14:19:12.173:147) : arch=i386 syscall=open success=yes exit=3 a0=9db18d0 a1=8241 a2=1b6 a3=8241 items=0 ppid=2808 pid=3015 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 comm=bash exe=/bin/bash subj=root:staff_r:staff_t:s0-s15:c0.c255 key=(null) 
type=AVC msg=audit(12/03/2007 14:19:12.173:147) : avc:  denied  { write } for  pid=3015 comm=bash name=audit.log dev=sda1 ino=131084 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=root:object_r:sysadm_home_dir_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 14:19:12.173:147) : avc:  denied  { create } for  pid=3015 comm=bash name=audit.log scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=root:object_r:sysadm_home_dir_t:s0 tclass=file 
type=AVC msg=audit(12/03/2007 14:19:12.173:147) : avc:  denied  { add_name } for  pid=3015 comm=bash name=audit.log scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=root:object_r:sysadm_home_dir_t:s0-s15:c0.c255 tclass=dir 
type=AVC msg=audit(12/03/2007 14:19:12.173:147) : avc:  denied  { write } for  pid=3015 comm=bash name=root dev=sda1 ino=130945 scontext=root:staff_r:staff_t:s0-s15:c0.c255 tcontext=root:object_r:sysadm_home_dir_t:s0-s15:c0.c255 tclass=dir