type=DAEMON_START msg=audit(1274183027.176:7396): auditd start, ver=2.0.4 format=raw kernel=2.6.32-25.el6.x86_64 auid=4294967295 pid=923 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1274183027.293:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1274183027.449:5): user pid=950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1274183027.449:6): user pid=950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1274183027.521:7): user pid=950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1274183027.521:8): user pid=950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_AUTH msg=audit(1274183035.583:9): user pid=1121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" hostname=? addr=? terminal=tty1 res=success'
type=USER_ACCT msg=audit(1274183035.588:10): user pid=1121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" hostname=? addr=? terminal=tty1 res=success'
type=LOGIN msg=audit(1274183035.589:11): login pid=1121 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1274183035.632:12): user pid=1121 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty1 res=success'
type=USER_START msg=audit(1274183035.636:13): user pid=1121 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" hostname=? addr=? terminal=tty1 res=success'
type=CRED_ACQ msg=audit(1274183035.637:14): user pid=1121 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty1 res=success'
type=USER_LOGIN msg=audit(1274183035.637:15): user pid=1121 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/bin/login" hostname=? addr=? terminal=tty1 res=success'
type=SYSTEM_RUNLEVEL msg=audit(1274183061.188:16): user pid=1161 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=6: exe="/sbin/shutdown" hostname=? addr=? terminal=tty1 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1274183061.191:17): user pid=1161 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=tty1 res=success'
type=CRED_DISP msg=audit(1274183061.217:18): user pid=1121 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty1 res=success'
type=USER_END msg=audit(1274183061.219:19): user pid=1121 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" hostname=? addr=? terminal=tty1 res=success'
type=DAEMON_END msg=audit(1274183063.054:7397): auditd normal halt, sending auid=0 pid=1229 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1274183089.785:5066): auditd start, ver=2.0.4 format=raw kernel=2.6.32-25.el6.x86_64 auid=4294967295 pid=1005 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1274183089.988:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1274183090.202:5): user pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1274183090.202:6): user pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1274183090.273:7): user pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1274183090.273:8): user pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_LOGIN msg=audit(1274183159.738:9): user pid=1199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.0.2 terminal=sshd res=failed'
type=USER_AUTH msg=audit(1274183165.609:10): user pid=1199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1274183165.616:11): user pid=1199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1274183165.623:12): user pid=1199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1274183165.623:13): login pid=1199 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1274183165.687:14): user pid=1199 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1274183165.688:15): user pid=1199 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1274183165.695:16): user pid=1199 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1274183165.709:17): user pid=1204 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1274183165.714:18): user pid=1204 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=ADD_GROUP msg=audit(1274183432.897:19): user pid=1248 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=32 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274183433.235:20): user pid=1248 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=32 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274183433.235:21): user pid=1248 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=32 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_USER msg=audit(1274183433.271:22): user pid=1252 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=32 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274183439.218:23): user pid=1262 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
type=ADD_USER msg=audit(1274183439.218:24): user pid=1262 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=29 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274183440.698:25): user pid=1270 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=4294967294 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274183440.933:26): user pid=1270 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=4294967294 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274183440.933:27): user pid=1270 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=4294967294 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_USER msg=audit(1274183440.952:28): user pid=1277 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=4294967294 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
type=SYSTEM_RUNLEVEL msg=audit(1274183608.813:29): user pid=1384 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=6: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1274183608.816:30): user pid=1384 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1274183609.055:31): user pid=1199 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1274183609.058:32): user pid=1199 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1274183609.725:5067): auditd normal halt, sending auid=0 pid=1461 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1274183635.793:3965): auditd start, ver=2.0.4 format=raw kernel=2.6.32-25.el6.x86_64 auid=4294967295 pid=987 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1274183635.913:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1274183636.282:5): user pid=1036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1274183636.282:6): user pid=1036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1274183636.345:7): user pid=1036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1274183636.345:8): user pid=1036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_LOGIN msg=audit(1274183643.556:9): user pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.0.2 terminal=sshd res=failed'
type=USER_AUTH msg=audit(1274183646.953:10): user pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1274183646.962:11): user pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1274183646.968:12): user pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1274183646.968:13): login pid=1283 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1274183647.031:14): user pid=1283 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1274183647.032:15): user pid=1283 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1274183647.040:16): user pid=1283 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1274183647.055:17): user pid=1287 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1274183647.059:18): user pid=1287 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_END msg=audit(1274183838.049:19): user pid=1283 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1274183838.053:20): user pid=1283 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1274183855.392:21): user pid=1344 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1274183855.397:22): user pid=1344 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1274183855.398:23): login pid=1344 uid=0 old auid=0 new auid=0 old ses=1 new ses=2
type=USER_ROLE_CHANGE msg=audit(1274183855.452:24): user pid=1344 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1274183855.453:25): user pid=1344 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1274183855.460:26): user pid=1344 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1274183855.474:27): user pid=1347 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1274183855.478:28): user pid=1347 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1274184061.511:29): user pid=1365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274184061.512:30): user pid=1365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274184061.516:31): login pid=1365 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
type=USER_START msg=audit(1274184061.518:32): user pid=1365 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274184061.588:33): user pid=1365 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274184061.589:34): user pid=1365 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274187661.633:35): user pid=1459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274187661.634:36): user pid=1459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274187661.635:37): login pid=1459 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
type=USER_START msg=audit(1274187661.636:38): user pid=1459 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274187661.680:39): user pid=1459 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274187661.680:40): user pid=1459 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274188713.917:41): user pid=1344 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1274188713.920:42): user pid=1344 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1274188738.052:43): user pid=1493 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1274188738.058:44): user pid=1493 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1274188738.058:45): login pid=1493 uid=0 old auid=0 new auid=0 old ses=1 new ses=5
type=USER_ROLE_CHANGE msg=audit(1274188738.111:46): user pid=1493 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1274188738.112:47): user pid=1493 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1274188738.118:48): user pid=1493 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1274188738.134:49): user pid=1496 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1274188738.137:50): user pid=1496 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1274191261.729:51): user pid=1530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274191261.730:52): user pid=1530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274191261.731:53): login pid=1530 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
type=USER_START msg=audit(1274191261.733:54): user pid=1530 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274191261.795:55): user pid=1530 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274191261.795:56): user pid=1530 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=ADD_GROUP msg=audit(1274191915.055:57): user pid=1569 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=81 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274191915.312:58): user pid=1569 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=81 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274191915.313:59): user pid=1569 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=81 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_USER msg=audit(1274191915.521:60): user pid=1573 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=81 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274191941.313:61): user pid=1621 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=495 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274191941.522:62): user pid=1621 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=495 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274191941.522:63): user pid=1621 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=495 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_USER msg=audit(1274191941.648:64): user pid=1626 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=498 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274191971.087:65): user pid=1665 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=494 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274191971.479:66): user pid=1665 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=494 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_GROUP msg=audit(1274191971.479:67): user pid=1665 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=494 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
type=ADD_USER msg=audit(1274191971.653:68): user pid=1670 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=497 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1274194861.844:69): user pid=1778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274194861.845:70): user pid=1778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274194861.850:71): login pid=1778 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
type=USER_START msg=audit(1274194861.852:72): user pid=1778 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274194861.920:73): user pid=1778 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274194861.920:74): user pid=1778 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274198461.953:75): user pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274198461.954:76): user pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274198461.955:77): login pid=1824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
type=USER_START msg=audit(1274198461.957:78): user pid=1824 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274198462.002:79): user pid=1824 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274198462.002:80): user pid=1824 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274202061.034:81): user pid=1871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274202061.034:82): user pid=1871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274202061.035:83): login pid=1871 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
type=USER_START msg=audit(1274202061.036:84): user pid=1871 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274202061.076:85): user pid=1871 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274202061.077:86): user pid=1871 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274205661.108:87): user pid=1917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274205661.108:88): user pid=1917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274205661.108:89): login pid=1917 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
type=USER_START msg=audit(1274205661.109:90): user pid=1917 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274205661.151:91): user pid=1917 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274205661.151:92): user pid=1917 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274209261.182:93): user pid=1980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274209261.182:94): user pid=1980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274209261.183:95): login pid=1980 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
type=USER_START msg=audit(1274209261.183:96): user pid=1980 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274209261.223:97): user pid=1980 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274209261.223:98): user pid=1980 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274212861.254:99): user pid=2026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274212861.254:100): user pid=2026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274212861.255:101): login pid=2026 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
type=USER_START msg=audit(1274212861.256:102): user pid=2026 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274212861.296:103): user pid=2026 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274212861.296:104): user pid=2026 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274216461.327:105): user pid=2073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274216461.328:106): user pid=2073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274216461.328:107): login pid=2073 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
type=USER_START msg=audit(1274216461.329:108): user pid=2073 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274216461.369:109): user pid=2073 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274216461.369:110): user pid=2073 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274220061.400:111): user pid=2120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274220061.401:112): user pid=2120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274220061.401:113): login pid=2120 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
type=USER_START msg=audit(1274220061.402:114): user pid=2120 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274220061.444:115): user pid=2120 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274220061.444:116): user pid=2120 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274223661.475:117): user pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274223661.476:118): user pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274223661.476:119): login pid=2166 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
type=USER_START msg=audit(1274223661.477:120): user pid=2166 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274223661.517:121): user pid=2166 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274223661.517:122): user pid=2166 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274227261.550:123): user pid=2213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274227261.550:124): user pid=2213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274227261.551:125): login pid=2213 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
type=USER_START msg=audit(1274227261.552:126): user pid=2213 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274227261.597:127): user pid=2213 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274227261.597:128): user pid=2213 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274230861.628:129): user pid=2274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274230861.628:130): user pid=2274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274230861.629:131): login pid=2274 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
type=USER_START msg=audit(1274230861.629:132): user pid=2274 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274230861.669:133): user pid=2274 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274230861.669:134): user pid=2274 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274234461.701:135): user pid=2331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274234461.701:136): user pid=2331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274234461.701:137): login pid=2331 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
type=USER_START msg=audit(1274234461.702:138): user pid=2331 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274234461.746:139): user pid=2331 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274234461.746:140): user pid=2331 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274238061.778:141): user pid=2378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274238061.778:142): user pid=2378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274238061.780:143): login pid=2378 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
type=USER_START msg=audit(1274238061.781:144): user pid=2378 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274238061.821:145): user pid=2378 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274238061.821:146): user pid=2378 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSTEM_RUNLEVEL msg=audit(1274240490.833:147): user pid=2425 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1274240490.836:148): user pid=2425 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1274240491.073:149): user pid=1493 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1274240491.075:150): user pid=1493 uid=0 auid=0 ses=5 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1274240492.347:3966): auditd normal halt, sending auid=0 pid=2552 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1274260302.836:7612): auditd start, ver=2.0.4 format=raw kernel=2.6.32-25.el6.x86_64 auid=4294967295 pid=1011 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1274260302.956:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1274260303.304:5): user pid=1060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1274260303.308:6): user pid=1060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1274260303.381:7): user pid=1060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1274260303.383:8): user pid=1060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1274260326.747:9): user pid=1321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1274260326.753:10): user pid=1321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1274260326.753:11): login pid=1321 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1274260326.810:12): user pid=1321 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1274260326.811:13): user pid=1321 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1274260326.817:14): user pid=1321 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1274260326.832:15): user pid=1324 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1274260326.836:16): user pid=1324 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1274263261.843:17): user pid=1361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274263261.844:18): user pid=1361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274263261.848:19): login pid=1361 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1274263261.850:20): user pid=1361 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274263261.921:21): user pid=1361 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274263261.922:22): user pid=1361 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSTEM_RUNLEVEL msg=audit(1274264358.846:23): user pid=1392 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1274264358.849:24): user pid=1392 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1274264359.088:25): user pid=1321 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1274264359.090:26): user pid=1321 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1274264360.441:7613): auditd normal halt, sending auid=0 pid=1523 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1274883291.109:9412): auditd start, ver=2.0.4 format=raw kernel=2.6.32-25.el6.x86_64 auid=4294967295 pid=990 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1274883291.226:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1274883291.859:5): user pid=1039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1274883291.860:6): user pid=1039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1274883292.017:7): user pid=1039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1274883292.018:8): user pid=1039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1274883429.589:9): user pid=1308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1274883429.655:10): user pid=1308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1274883429.655:11): login pid=1308 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1274883429.777:12): user pid=1308 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1274883429.778:13): user pid=1308 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1274883429.785:14): user pid=1308 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1274883429.823:15): user pid=1312 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1274883429.827:16): user pid=1312 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1274883591.138:17): user pid=1360 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1274883591.153:18): user pid=1360 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1274883591.154:19): login pid=1360 uid=0 old auid=0 new auid=0 old ses=1 new ses=2
type=USER_ROLE_CHANGE msg=audit(1274883591.209:20): user pid=1360 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1274883591.210:21): user pid=1360 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1274883591.217:22): user pid=1360 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1274883591.274:23): user pid=1364 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/1 res=success'
type=CRED_REFR msg=audit(1274883591.601:24): user pid=1364 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=MAC_POLICY_LOAD msg=audit(1274883827.902:25): policy loaded auid=0 ses=1
type=SYSCALL msg=audit(1274883827.902:25): arch=c000003e syscall=1 success=yes exit=128 a0=4 a1=7fca15bd3000 a2=56924c a3=7fff70e05070 items=0 ppid=1499 pid=1500 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
type=USER_ACCT msg=audit(1274886061.271:26): user pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274886061.272:27): user pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274886061.276:28): login pid=8706 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
type=USER_START msg=audit(1274886061.279:29): user pid=8706 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274886061.369:30): user pid=8706 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274886061.369:31): user pid=8706 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274889661.407:32): user pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274889661.407:33): user pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274889661.408:34): login pid=8782 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
type=USER_START msg=audit(1274889661.409:35): user pid=8782 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274889661.454:36): user pid=8782 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274889661.455:37): user pid=8782 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274893261.486:38): user pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274893261.486:39): user pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274893261.487:40): login pid=8844 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
type=USER_START msg=audit(1274893261.488:41): user pid=8844 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274893261.529:42): user pid=8844 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274893261.529:43): user pid=8844 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274896861.561:44): user pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274896861.562:45): user pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274896861.562:46): login pid=8891 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
type=USER_START msg=audit(1274896861.563:47): user pid=8891 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274896861.605:48): user pid=8891 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274896861.605:49): user pid=8891 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274900461.637:50): user pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274900461.638:51): user pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274900461.638:52): login pid=8937 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
type=USER_START msg=audit(1274900461.639:53): user pid=8937 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274900461.680:54): user pid=8937 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274900461.680:55): user pid=8937 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274904061.713:56): user pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274904061.714:57): user pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274904061.714:58): login pid=8984 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
type=USER_START msg=audit(1274904061.715:59): user pid=8984 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274904061.758:60): user pid=8984 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274904061.758:61): user pid=8984 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274907661.791:62): user pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274907661.792:63): user pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274907661.792:64): login pid=9047 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
type=USER_START msg=audit(1274907661.793:65): user pid=9047 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274907661.834:66): user pid=9047 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274907661.834:67): user pid=9047 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274911261.867:68): user pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274911261.867:69): user pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274911261.868:70): login pid=9093 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
type=USER_START msg=audit(1274911261.869:71): user pid=9093 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274911261.909:72): user pid=9093 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274911261.909:73): user pid=9093 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274914861.942:74): user pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274914861.942:75): user pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274914861.943:76): login pid=9140 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
type=USER_START msg=audit(1274914861.944:77): user pid=9140 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274914861.984:78): user pid=9140 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274914861.984:79): user pid=9140 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274918461.015:80): user pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274918461.015:81): user pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274918461.016:82): login pid=9202 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
type=USER_START msg=audit(1274918461.017:83): user pid=9202 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274918461.057:84): user pid=9202 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274918461.057:85): user pid=9202 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274922061.090:86): user pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274922061.090:87): user pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274922061.091:88): login pid=9249 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
type=USER_START msg=audit(1274922061.092:89): user pid=9249 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274922061.133:90): user pid=9249 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274922061.133:91): user pid=9249 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274925661.166:92): user pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274925661.166:93): user pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274925661.167:94): login pid=9306 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
type=USER_START msg=audit(1274925661.168:95): user pid=9306 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274925661.208:96): user pid=9306 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274925661.208:97): user pid=9306 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274929261.239:98): user pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274929261.240:99): user pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274929261.240:100): login pid=9368 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
type=USER_START msg=audit(1274929261.241:101): user pid=9368 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274929261.281:102): user pid=9368 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274929261.281:103): user pid=9368 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274932861.315:104): user pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274932861.315:105): user pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274932861.316:106): login pid=9414 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
type=USER_START msg=audit(1274932861.317:107): user pid=9414 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274932861.357:108): user pid=9414 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274932861.357:109): user pid=9414 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274936461.390:110): user pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274936461.391:111): user pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274936461.391:112): login pid=9460 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
type=USER_START msg=audit(1274936461.392:113): user pid=9460 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274936461.432:114): user pid=9460 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274936461.433:115): user pid=9460 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274940061.464:116): user pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274940061.464:117): user pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274940061.465:118): login pid=9523 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
type=USER_START msg=audit(1274940061.466:119): user pid=9523 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274940061.505:120): user pid=9523 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274940061.506:121): user pid=9523 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274943661.539:122): user pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274943661.539:123): user pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274943661.540:124): login pid=9570 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
type=USER_START msg=audit(1274943661.541:125): user pid=9570 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274943661.581:126): user pid=9570 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274943661.581:127): user pid=9570 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274947261.615:128): user pid=9616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274947261.615:129): user pid=9616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274947261.616:130): login pid=9616 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20
type=USER_START msg=audit(1274947261.617:131): user pid=9616 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274947261.657:132): user pid=9616 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274947261.657:133): user pid=9616 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274950861.691:134): user pid=9663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274950861.691:135): user pid=9663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274950861.692:136): login pid=9663 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21
type=USER_START msg=audit(1274950861.693:137): user pid=9663 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274950861.733:138): user pid=9663 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274950861.734:139): user pid=9663 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1274954461.765:140): user pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1274954461.765:141): user pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1274954461.766:142): login pid=9725 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22
type=USER_START msg=audit(1274954461.767:143): user pid=9725 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1274954461.807:144): user pid=9725 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1274954461.807:145): user pid=9725 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSTEM_RUNLEVEL msg=audit(1274955426.249:146): user pid=9741 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1274955426.252:147): user pid=9741 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1274955426.709:148): user pid=1360 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_END msg=audit(1274955426.710:149): user pid=1308 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1274955426.713:150): user pid=1360 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1274955426.715:151): user pid=1308 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1274955428.209:9413): auditd normal halt, sending auid=0 pid=9886 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1275459834.896:6074): auditd start, ver=2.0.4 format=raw kernel=2.6.32-28.el6.x86_64 auid=4294967295 pid=1005 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1275459835.016:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1275459835.729:5): user pid=1054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1275459835.730:6): user pid=1054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1275459835.849:7): user pid=1054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1275459835.849:8): user pid=1054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1275459864.187:9): user pid=1317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1275459864.243:10): user pid=1317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1275459864.243:11): login pid=1317 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1275459864.341:12): user pid=1317 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1275459864.342:13): user pid=1317 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1275459864.349:14): user pid=1317 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1275459864.381:15): user pid=1320 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1275459864.385:16): user pid=1320 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1275460252.155:17): user pid=1342 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1275460252.158:18): user pid=1342 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1275460252.694:19): user pid=1317 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1275460252.696:20): user pid=1317 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1275460254.101:6075): auditd normal halt, sending auid=0 pid=1485 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1275538717.574:6562): auditd start, ver=2.0.4 format=raw kernel=2.6.32-28.el6.x86_64 auid=4294967295 pid=986 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1275538717.692:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1275538718.018:5): user pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1275538718.018:6): user pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1275538718.089:7): user pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1275538718.089:8): user pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1275538760.437:9): user pid=1297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1275538760.445:10): user pid=1297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1275538760.445:11): login pid=1297 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1275538760.502:12): user pid=1297 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1275538760.502:13): user pid=1297 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1275538760.510:14): user pid=1297 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1275538760.524:15): user pid=1300 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1275538760.528:16): user pid=1300 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1275538875.073:17): user pid=1319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1275538875.079:18): user pid=1319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1275538875.079:19): login pid=1319 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_ROLE_CHANGE msg=audit(1275538875.119:20): user pid=1319 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1275538875.119:21): user pid=1319 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1275538875.125:22): user pid=1319 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_REFR msg=audit(1275538875.133:23): user pid=1323 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_END msg=audit(1275538875.237:24): user pid=1319 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1275538875.239:25): user pid=1319 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=ADD_USER msg=audit(1275539128.210:26): user pid=1376 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="postfix" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ADD_USER msg=audit(1275539128.211:27): user pid=1376 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="postfix" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ADD_USER msg=audit(1275539134.801:28): user pid=1810 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ADD_USER msg=audit(1275539134.801:29): user pid=1810 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=MAC_POLICY_LOAD msg=audit(1275539261.513:30): policy loaded auid=0 ses=1
type=SYSCALL msg=audit(1275539261.513:30): arch=c000003e syscall=1 success=yes exit=128 a0=4 a1=7f51b6aa7000 a2=56513d a3=7fff3c43db00 items=0 ppid=1872 pid=1873 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
type=USER_START msg=audit(1275539374.380:31): user pid=2168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1275539374.381:32): user pid=2168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1275539374.435:33): user pid=2168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1275539374.436:34): user pid=2168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1275541261.950:35): user pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1275541261.951:36): user pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1275541261.955:37): login pid=7342 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
type=USER_START msg=audit(1275541261.957:38): user pid=7342 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1275541262.039:39): user pid=7342 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1275541262.040:40): user pid=7342 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSTEM_RUNLEVEL msg=audit(1275543428.307:41): user pid=7391 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1275543428.310:42): user pid=7391 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1275543428.775:43): user pid=1297 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1275543428.778:44): user pid=1297 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1275543430.204:6563): auditd normal halt, sending auid=0 pid=7547 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1275543895.783:7449): auditd start, ver=2.0.4 format=raw kernel=2.6.32-31.el6.x86_64 auid=4294967295 pid=995 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1275543895.902:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1275543896.280:5): user pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1275543896.281:6): user pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1275543896.338:7): user pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1275543896.338:8): user pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1275543920.051:9): user pid=1319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1275543920.058:10): user pid=1319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1275543920.058:11): login pid=1319 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1275543920.113:12): user pid=1319 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1275543920.113:13): user pid=1319 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1275543920.119:14): user pid=1319 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1275543920.269:15): user pid=1322 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1275543920.275:16): user pid=1322 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1275543958.086:17): user pid=1338 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1275543958.089:18): user pid=1338 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1275543958.491:19): user pid=1319 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1275543958.493:20): user pid=1319 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1275543959.226:7450): auditd normal halt, sending auid=0 pid=1438 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1275546327.795:3033): auditd start, ver=2.0.4 format=raw kernel=2.6.32-31.el6.x86_64 auid=4294967295 pid=1004 subj=system_u:system_r:auditd_t:s0 res=success
type=CONFIG_CHANGE msg=audit(1275546327.914:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
type=USER_START msg=audit(1275546328.284:5): user pid=1057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1275546328.284:6): user pid=1057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1275546328.340:7): user pid=1057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1275546328.340:8): user pid=1057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1275546345.554:9): user pid=1331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1275546345.561:10): user pid=1331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1275546345.561:11): login pid=1331 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_ROLE_CHANGE msg=audit(1275546345.616:12): user pid=1331 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed'
type=USER_ROLE_CHANGE msg=audit(1275546345.616:13): user pid=1331 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1275546345.623:14): user pid=1331 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1275546345.640:15): user pid=1334 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1275546345.643:16): user pid=1334 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1275546418.236:17): user pid=1440 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1275546418.239:18): user pid=1440 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1275546418.624:19): user pid=1331 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1275546418.626:20): user pid=1331 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1275546419.557:3034): auditd normal halt, sending auid=0 pid=1542 subj=system_u:system_r:initrc_t:s0 res=success
type=DAEMON_START msg=audit(1278312811.674:2113): auditd start, ver=2.0.4 format=raw kernel=2.6.32-31.el6.x86_64 auid=4294967295 pid=969 res=success
type=CONFIG_CHANGE msg=audit(1278312811.787:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1278312812.456:4): user pid=1023 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1278312812.456:5): user pid=1023 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1278312812.560:6): user pid=1023 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1278312812.561:7): user pid=1023 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1278312846.287:8): user pid=1294 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1278312846.292:9): user pid=1294 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1278312846.292:10): login pid=1294 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1278312846.295:11): user pid=1294 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1278312846.318:12): user pid=1296 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1278312846.321:13): user pid=1296 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1278313261.969:14): user pid=1404 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1278313261.972:15): user pid=1404 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1278313261.972:16): login pid=1404 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1278313261.975:17): user pid=1404 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1278313262.405:18): user pid=1404 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1278313262.405:19): user pid=1404 uid=0 auid=0 ses=2 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=ADD_USER msg=audit(1278313485.828:20): user pid=1500 uid=0 auid=0 ses=1 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ADD_USER msg=audit(1278313485.828:21): user pid=1500 uid=0 auid=0 ses=1 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=SYSTEM_RUNLEVEL msg=audit(1278314892.918:22): user pid=7142 uid=0 auid=0 ses=1 msg='old-level=3 new-level=6: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1278314892.918:23): user pid=7142 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1278314893.452:24): user pid=1294 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1278314893.455:25): user pid=1294 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1278314894.681:2114): auditd normal halt, sending auid=0 pid=7267 subj= res=success
type=DAEMON_START msg=audit(1278314930.449:2860): auditd start, ver=2.0.4 format=raw kernel=2.6.32-42.el6.x86_64 auid=4294967295 pid=1011 res=success
type=CONFIG_CHANGE msg=audit(1278314930.561:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1278314931.081:4): user pid=1064 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1278314931.081:5): user pid=1064 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1278314931.101:6): user pid=1064 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1278314931.101:7): user pid=1064 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1278315101.556:8): user pid=1336 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1278315101.561:9): user pid=1336 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1278315101.561:10): login pid=1336 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1278315101.564:11): user pid=1336 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1278315101.579:12): user pid=1339 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1278315101.582:13): user pid=1339 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1278315104.673:14): user pid=1350 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1278315104.673:15): user pid=1350 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1278315105.036:16): user pid=1336 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1278315105.038:17): user pid=1336 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1278315105.799:2861): auditd normal halt, sending auid=0 pid=1460 subj= res=success
type=DAEMON_START msg=audit(1278418570.812:4802): auditd start, ver=2.0.4 format=raw kernel=2.6.32-42.el6.x86_64 auid=4294967295 pid=1019 res=success
type=CONFIG_CHANGE msg=audit(1278418570.924:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1278418571.811:4): user pid=1072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1278418571.811:5): user pid=1072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1278418571.854:6): user pid=1072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1278418571.854:7): user pid=1072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1278418590.982:8): user pid=1345 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1278418590.987:9): user pid=1345 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1278418590.988:10): login pid=1345 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1278418590.990:11): user pid=1345 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1278418591.027:12): user pid=1347 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1278418591.030:13): user pid=1347 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=ANOM_ABEND msg=audit(1278418612.055:14): auid=0 uid=0 gid=0 ses=1 pid=1359 comm="yum" sig=6
type=SYSTEM_RUNLEVEL msg=audit(1278418644.334:15): user pid=1377 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success'
type=SYSTEM_SHUTDOWN msg=audit(1278418644.335:16): user pid=1377 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1278418645.178:17): user pid=1345 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1278418645.180:18): user pid=1345 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1278418646.036:4803): auditd normal halt, sending auid=0 pid=1494 subj= res=success
type=DAEMON_START msg=audit(1278419945.477:9568): auditd start, ver=2.0.4 format=raw kernel=2.6.32-42.el6.x86_64 auid=4294967295 pid=1010 res=success
type=CONFIG_CHANGE msg=audit(1278419945.589:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1278419945.862:4): user pid=1063 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1278419945.862:5): user pid=1063 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1278419945.882:6): user pid=1063 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1278419945.882:7): user pid=1063 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1278419975.520:8): user pid=1344 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1278419975.526:9): user pid=1344 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1278419975.526:10): login pid=1344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1278419975.529:11): user pid=1344 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1278419975.544:12): user pid=1346 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1278419975.546:13): user pid=1346 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1278419990.574:14): user pid=1358 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1278419990.574:15): user pid=1358 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1278419990.931:16): user pid=1344 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1278419990.933:17): user pid=1344 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1278419991.814:9569): auditd normal halt, sending auid=0 pid=1475 subj= res=success
type=DAEMON_START msg=audit(1278491351.731:2066): auditd start, ver=2.0.4 format=raw kernel=2.6.32-42.el6.x86_64 auid=4294967295 pid=1017 res=success
type=CONFIG_CHANGE msg=audit(1278491351.895:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1278491352.552:4): user pid=1070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1278491352.552:5): user pid=1070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1278491352.841:6): user pid=1070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1278491352.841:7): user pid=1070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1278491364.265:8): user pid=1351 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1278491364.270:9): user pid=1351 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1278491364.270:10): login pid=1351 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1278491364.273:11): user pid=1351 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1278491364.305:12): user pid=1353 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1278491364.309:13): user pid=1353 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=ANOM_ABEND msg=audit(1278491433.657:14): auid=0 uid=0 gid=0 ses=1 pid=1364 comm="yum" sig=11
type=SYSTEM_RUNLEVEL msg=audit(1278491604.957:15): user pid=1446 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1278491604.957:16): user pid=1446 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1278491605.884:17): user pid=1351 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1278491605.886:18): user pid=1351 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1278491606.742:2067): auditd normal halt, sending auid=0 pid=1563 subj= res=success
type=DAEMON_START msg=audit(1278592964.670:4837): auditd start, ver=2.0.4 format=raw kernel=2.6.32-42.el6.x86_64 auid=4294967295 pid=1036 res=success
type=CONFIG_CHANGE msg=audit(1278592964.780:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1278592965.356:4): user pid=1089 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1278592965.356:5): user pid=1089 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1278592965.377:6): user pid=1089 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1278592965.377:7): user pid=1089 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1278592976.206:8): user pid=1370 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1278592976.212:9): user pid=1370 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1278592976.212:10): login pid=1370 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1278592976.214:11): user pid=1370 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1278592976.246:12): user pid=1372 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1278592976.249:13): user pid=1372 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1278593120.615:14): user pid=6606 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1278593120.616:15): user pid=6606 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1278593121.292:16): user pid=1370 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1278593121.294:17): user pid=1370 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1278593122.173:4838): auditd normal halt, sending auid=0 pid=6724 subj= res=success
type=DAEMON_START msg=audit(1278667632.509:6410): auditd start, ver=2.0.4 format=raw kernel=2.6.32-43.el6.x86_64 auid=4294967295 pid=1008 res=success
type=CONFIG_CHANGE msg=audit(1278667632.620:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1278667632.978:4): user pid=1061 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1278667632.978:5): user pid=1061 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1278667633.000:6): user pid=1061 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1278667633.000:7): user pid=1061 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1278667641.474:8): user pid=1342 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1278667641.479:9): user pid=1342 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1278667641.480:10): login pid=1342 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1278667641.482:11): user pid=1342 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1278667641.497:12): user pid=1344 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1278667641.500:13): user pid=1344 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1278669661.782:14): user pid=6595 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1278669661.783:15): user pid=6595 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1278669661.784:16): login pid=6595 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1278669661.785:17): user pid=6595 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1278669661.847:18): user pid=6595 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1278669661.847:19): user pid=6595 uid=0 auid=0 ses=2 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSTEM_RUNLEVEL msg=audit(1278670223.203:20): user pid=6625 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1278670223.203:21): user pid=6625 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1278670223.608:22): user pid=1342 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1278670223.610:23): user pid=1342 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1278670225.009:6411): auditd normal halt, sending auid=0 pid=6743 subj= res=success
type=DAEMON_START msg=audit(1278923701.362:9587): auditd start, ver=2.0.4 format=raw kernel=2.6.32-44.el6.x86_64 auid=4294967295 pid=1017 res=success
type=CONFIG_CHANGE msg=audit(1278923701.474:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1278923702.574:4): user pid=1070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1278923702.575:5): user pid=1070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1278923702.683:6): user pid=1070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1278923702.683:7): user pid=1070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1278923732.386:8): user pid=1351 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1278923732.391:9): user pid=1351 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1278923732.391:10): login pid=1351 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1278923732.394:11): user pid=1351 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1278923732.435:12): user pid=1353 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1278923732.438:13): user pid=1353 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1278923761.876:14): user pid=1366 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1278923761.876:15): user pid=1366 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1278923762.797:16): user pid=1351 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1278923762.798:17): user pid=1351 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1278923763.654:9588): auditd normal halt, sending auid=0 pid=1483 subj= res=success
type=DAEMON_START msg=audit(1279090341.809:9381): auditd start, ver=2.0.4 format=raw kernel=2.6.32-44.el6.x86_64 auid=4294967295 pid=1019 res=success
type=CONFIG_CHANGE msg=audit(1279090341.935:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1279090342.626:4): user pid=1072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1279090342.627:5): user pid=1072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1279090342.680:6): user pid=1072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1279090342.680:7): user pid=1072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1279090396.383:8): user pid=1353 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1279090396.388:9): user pid=1353 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1279090396.389:10): login pid=1353 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1279090396.392:11): user pid=1353 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1279090396.423:12): user pid=1355 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1279090396.426:13): user pid=1355 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1279090423.286:14): user pid=1367 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1279090423.286:15): user pid=1367 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1279090424.091:16): user pid=1353 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1279090424.093:17): user pid=1353 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1279090424.952:9382): auditd normal halt, sending auid=0 pid=1484 subj= res=success
type=DAEMON_START msg=audit(1279190237.606:9230): auditd start, ver=2.0.4 format=raw kernel=2.6.32-44.el6.x86_64 auid=4294967295 pid=1010 res=success
type=CONFIG_CHANGE msg=audit(1279190237.716:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1279190238.251:4): user pid=1063 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1279190238.251:5): user pid=1063 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1279190238.281:6): user pid=1063 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1279190238.281:7): user pid=1063 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1279190298.545:8): user pid=1345 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1279190298.551:9): user pid=1345 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1279190298.551:10): login pid=1345 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1279190298.554:11): user pid=1345 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1279190298.594:12): user pid=1347 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1279190298.597:13): user pid=1347 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1279190321.619:14): user pid=1359 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1279190321.620:15): user pid=1359 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1279190322.593:16): user pid=1345 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1279190322.595:17): user pid=1345 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1279190323.459:9231): auditd normal halt, sending auid=0 pid=1476 subj= res=success
type=DAEMON_START msg=audit(1279267325.721:9957): auditd start, ver=2.0.4 format=raw kernel=2.6.32-44.el6.x86_64 auid=4294967295 pid=993 res=success
type=CONFIG_CHANGE msg=audit(1279267325.832:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1279267326.466:4): user pid=1046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1279267326.467:5): user pid=1046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1279267326.500:6): user pid=1046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1279267326.501:7): user pid=1046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1279267544.327:8): user pid=1327 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1279267544.333:9): user pid=1327 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1279267544.333:10): login pid=1327 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1279267544.336:11): user pid=1327 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1279267544.367:12): user pid=1330 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1279267544.370:13): user pid=1330 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1279267682.424:14): user pid=6561 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1279267682.424:15): user pid=6561 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1279267683.345:16): user pid=1327 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1279267683.347:17): user pid=1327 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1279267684.224:9958): auditd normal halt, sending auid=0 pid=6679 subj= res=success
type=DAEMON_START msg=audit(1279520366.790:6549): auditd start, ver=2.0.4 format=raw kernel=2.6.32-44.1.el6.x86_64 auid=4294967295 pid=1007 res=success
type=CONFIG_CHANGE msg=audit(1279520366.901:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1279520367.744:4): user pid=1060 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1279520367.745:5): user pid=1060 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1279520367.807:6): user pid=1060 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1279520367.807:7): user pid=1060 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1279521930.702:8): user pid=1341 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1279521930.708:9): user pid=1341 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1279521930.708:10): login pid=1341 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1279521930.711:11): user pid=1341 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1279521930.747:12): user pid=1344 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1279521930.750:13): user pid=1344 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1279521960.779:14): user pid=1356 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1279521960.779:15): user pid=1356 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1279521961.903:16): user pid=1341 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1279521961.906:17): user pid=1341 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1279521962.787:6550): auditd normal halt, sending auid=0 pid=1473 subj= res=success
type=DAEMON_START msg=audit(1279863433.701:8484): auditd start, ver=2.0.4 format=raw kernel=2.6.32-44.1.el6.x86_64 auid=4294967295 pid=993 res=success
type=CONFIG_CHANGE msg=audit(1279863433.812:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1279863434.355:4): user pid=1046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1279863434.356:5): user pid=1046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1279863434.368:6): user pid=1046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1279863434.368:7): user pid=1046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1279863509.188:8): user pid=1327 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1279863509.227:9): user pid=1327 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1279863509.227:10): login pid=1327 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1279863509.229:11): user pid=1327 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1279863509.270:12): user pid=1330 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1279863509.273:13): user pid=1330 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1279863838.181:14): user pid=1351 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1279863838.187:15): user pid=1351 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1279863838.187:16): login pid=1351 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1279863838.189:17): user pid=1351 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1279863838.195:18): user pid=1353 uid=0 auid=0 ses=2 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/1 res=success'
type=CRED_REFR msg=audit(1279863838.198:19): user pid=1353 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=ADD_USER msg=audit(1279863936.118:20): user pid=1379 uid=0 auid=0 ses=1 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ADD_USER msg=audit(1279863936.118:21): user pid=1379 uid=0 auid=0 ses=1 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ANOM_ABEND msg=audit(1279863936.121:22): auid=0 uid=0 gid=0 ses=1 pid=1367 comm="yum" sig=11
type=ADD_USER msg=audit(1279863999.488:23): user pid=1386 uid=0 auid=0 ses=1 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ADD_USER msg=audit(1279863999.488:24): user pid=1386 uid=0 auid=0 ses=1 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ANOM_ABEND msg=audit(1279864017.131:25): auid=0 uid=0 gid=0 ses=1 pid=1380 comm="yum" sig=11
type=ANOM_ABEND msg=audit(1279864235.305:26): auid=0 uid=0 gid=0 ses=1 pid=1419 comm="yum" sig=11
type=ANOM_ABEND msg=audit(1279864286.751:27): auid=0 uid=0 gid=0 ses=1 pid=1452 comm="yum" sig=6
type=ANOM_ABEND msg=audit(1279864709.403:28): auid=0 uid=0 gid=0 ses=1 pid=6833 comm="yum-complete-tr" sig=11
type=ANOM_ABEND msg=audit(1279864801.987:29): auid=0 uid=0 gid=0 ses=1 pid=6919 comm="yum-complete-tr" sig=6
type=USER_ACCT msg=audit(1279864861.675:30): user pid=6938 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1279864861.676:31): user pid=6938 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1279864861.676:32): login pid=6938 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
type=USER_START msg=audit(1279864861.677:33): user pid=6938 uid=0 auid=0 ses=3 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1279864861.771:34): user pid=6938 uid=0 auid=0 ses=3 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1279864861.771:35): user pid=6938 uid=0 auid=0 ses=3 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSTEM_RUNLEVEL msg=audit(1279864908.064:36): user pid=6977 uid=0 auid=0 ses=1 msg='old-level=3 new-level=6: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1279864908.064:37): user pid=6977 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1279864909.225:38): user pid=1351 uid=0 auid=0 ses=2 msg='op=PAM:session_close acct="root" exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_END msg=audit(1279864909.226:39): user pid=1327 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1279864909.228:40): user pid=1351 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1279864909.229:41): user pid=1327 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1279864910.692:8485): auditd normal halt, sending auid=0 pid=7100 subj= res=success
type=DAEMON_START msg=audit(1279864938.342:2904): auditd start, ver=2.0.4 format=raw kernel=2.6.32-52.el6.x86_64 auid=4294967295 pid=1002 res=success
type=CONFIG_CHANGE msg=audit(1279864938.453:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1279864938.782:4): user pid=1062 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1279864938.783:5): user pid=1062 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1279864938.802:6): user pid=1062 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1279864938.802:7): user pid=1062 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1279865023.852:8): user pid=1343 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1279865023.857:9): user pid=1343 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1279865023.857:10): login pid=1343 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1279865023.860:11): user pid=1343 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1279865023.874:12): user pid=1346 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1279865023.878:13): user pid=1346 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1279865046.794:14): user pid=1361 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1279865046.794:15): user pid=1361 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1279865047.135:16): user pid=1343 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1279865047.137:17): user pid=1343 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1279865048.019:2905): auditd normal halt, sending auid=0 pid=1482 subj= res=success
type=DAEMON_START msg=audit(1280129069.726:261): auditd start, ver=2.0.4 format=raw kernel=2.6.32-52.el6.x86_64 auid=4294967295 pid=1015 res=success
type=CONFIG_CHANGE msg=audit(1280129069.837:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1280129070.610:4): user pid=1075 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1280129070.610:5): user pid=1075 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1280129070.638:6): user pid=1075 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1280129070.638:7): user pid=1075 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1280129133.667:8): user pid=1356 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280129133.746:9): user pid=1356 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280129133.746:10): login pid=1356 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1280129133.749:11): user pid=1356 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280129133.815:12): user pid=1358 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1280129133.818:13): user pid=1358 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1280129475.243:14): user pid=1387 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1280129475.243:15): user pid=1387 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1280129476.177:16): user pid=1356 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1280129476.179:17): user pid=1356 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1280129477.063:262): auditd normal halt, sending auid=0 pid=1509 subj= res=success
type=DAEMON_START msg=audit(1280824935.813:2302): auditd start, ver=2.0.4 format=raw kernel=2.6.32-52.el6.x86_64 auid=4294967295 pid=994 res=success
type=CONFIG_CHANGE msg=audit(1280824935.925:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1280824936.611:4): user pid=1054 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1280824936.611:5): user pid=1054 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1280824936.642:6): user pid=1054 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1280824936.642:7): user pid=1054 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1280824965.913:8): user pid=1335 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280824965.919:9): user pid=1335 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280824965.919:10): login pid=1335 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1280824965.922:11): user pid=1335 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280824965.953:12): user pid=1337 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1280824965.956:13): user pid=1337 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=ANOM_ABEND msg=audit(1280825229.025:14): auid=0 uid=0 gid=0 ses=1 pid=1353 comm="yum" sig=6
type=USER_ACCT msg=audit(1280825315.661:15): user pid=1359 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280825315.666:16): user pid=1359 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280825315.667:17): login pid=1359 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1280825315.669:18): user pid=1359 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280825315.676:19): user pid=1362 uid=0 auid=0 ses=2 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/1 res=success'
type=CRED_REFR msg=audit(1280825315.679:20): user pid=1362 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=ANOM_ABEND msg=audit(1280825535.134:21): auid=0 uid=0 gid=0 ses=1 pid=1381 comm="yum" sig=6
type=SYSTEM_RUNLEVEL msg=audit(1280825569.366:22): user pid=6604 uid=0 auid=0 ses=1 msg='old-level=3 new-level=6: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1280825569.366:23): user pid=6604 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1280825572.389:24): user pid=1335 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_END msg=audit(1280825572.390:25): user pid=1359 uid=0 auid=0 ses=2 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1280825572.394:26): user pid=1359 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1280825572.395:27): user pid=1335 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1280825573.707:2303): auditd normal halt, sending auid=0 pid=6726 subj= res=success
type=DAEMON_START msg=audit(1280825602.507:8678): auditd start, ver=2.0.4 format=raw kernel=2.6.32-54.el6.x86_64 auid=4294967295 pid=1009 res=success
type=CONFIG_CHANGE msg=audit(1280825602.620:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1280825602.949:4): user pid=1069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1280825602.950:5): user pid=1069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1280825602.969:6): user pid=1069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1280825602.969:7): user pid=1069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1280825644.404:8): user pid=1350 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280825644.409:9): user pid=1350 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280825644.410:10): login pid=1350 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1280825644.412:11): user pid=1350 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280825644.419:12): user pid=1352 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1280825644.422:13): user pid=1352 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=ADD_USER msg=audit(1280825727.343:14): user pid=1427 uid=0 auid=0 ses=1 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=ADD_USER msg=audit(1280825727.343:15): user pid=1427 uid=0 auid=0 ses=1 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
type=USER_START msg=audit(1280825916.438:16): user pid=1768 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1280825916.438:17): user pid=1768 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1280825916.450:18): user pid=1768 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1280825916.450:19): user pid=1768 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1280826061.915:20): user pid=1831 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1280826061.916:21): user pid=1831 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1280826061.916:22): login pid=1831 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1280826061.917:23): user pid=1831 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1280826062.138:24): user pid=1831 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1280826062.138:25): user pid=1831 uid=0 auid=0 ses=2 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSTEM_RUNLEVEL msg=audit(1280826230.143:26): user pid=1850 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1280826230.143:27): user pid=1850 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1280826230.470:28): user pid=1350 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1280826230.473:29): user pid=1350 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1280826231.533:8679): auditd normal halt, sending auid=0 pid=1980 subj= res=success
type=DAEMON_START msg=audit(1280912140.702:3225): auditd start, ver=2.0.4 format=raw kernel=2.6.32-54.el6.x86_64 auid=4294967295 pid=1000 res=success
type=CONFIG_CHANGE msg=audit(1280912140.814:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1280912141.789:4): user pid=1061 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1280912141.789:5): user pid=1061 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1280912141.835:6): user pid=1061 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1280912141.835:7): user pid=1061 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1280912150.771:8): user pid=1342 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280912150.776:9): user pid=1342 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280912150.776:10): login pid=1342 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1280912150.779:11): user pid=1342 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280912150.809:12): user pid=1344 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1280912150.812:13): user pid=1344 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=SYSTEM_RUNLEVEL msg=audit(1280912313.269:14): user pid=1376 uid=0 auid=0 ses=1 msg='old-level=3 new-level=0: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=SYSTEM_SHUTDOWN msg=audit(1280912313.269:15): user pid=1376 uid=0 auid=0 ses=1 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1280912313.769:16): user pid=1342 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1280912313.771:17): user pid=1342 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_END msg=audit(1280912314.959:3226): auditd normal halt, sending auid=0 pid=1491 subj= res=success
type=DAEMON_START msg=audit(1280912436.494:7289): auditd start, ver=2.0.4 format=raw kernel=2.6.32-54.el6.x86_64 auid=4294967295 pid=1042 res=success
type=CONFIG_CHANGE msg=audit(1280912436.605:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1280912436.950:4): user pid=1103 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1280912436.950:5): user pid=1103 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1280912436.969:6): user pid=1103 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1280912436.969:7): user pid=1103 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1280912461.820:8): user pid=1384 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1280912461.820:9): user pid=1384 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1280912461.821:10): login pid=1384 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1280912461.821:11): user pid=1384 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1280912461.876:12): user pid=1384 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1280912461.876:13): user pid=1384 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1280912482.704:14): user pid=1396 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280912482.709:15): user pid=1396 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280912482.709:16): login pid=1396 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1280912482.711:17): user pid=1396 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280912482.725:18): user pid=1398 uid=0 auid=0 ses=2 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1280912482.729:19): user pid=1398 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=DAEMON_START msg=audit(1280913290.469:700): auditd start, ver=2.0.4 format=raw kernel=2.6.32-54.el6.x86_64 auid=4294967295 pid=1047 res=success
type=CONFIG_CHANGE msg=audit(1280913290.580:3): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1
type=USER_START msg=audit(1280913290.946:4): user pid=1108 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_ACQ msg=audit(1280913290.946:5): user pid=1108 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=CRED_DISP msg=audit(1280913290.962:6): user pid=1108 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_END msg=audit(1280913290.962:7): user pid=1108 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/sbin/runuser" hostname=? addr=? terminal=console res=success'
type=USER_ACCT msg=audit(1280913489.738:8): user pid=1388 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280913489.743:9): user pid=1388 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280913489.744:10): login pid=1388 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
type=USER_START msg=audit(1280913489.746:11): user pid=1388 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280913489.753:12): user pid=1391 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1280913489.756:13): user pid=1391 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_END msg=audit(1280913546.243:14): user pid=1388 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_DISP msg=audit(1280913546.245:15): user pid=1388 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1280913948.822:16): user pid=1417 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280913948.828:17): user pid=1417 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280913948.828:18): login pid=1417 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1280913948.829:19): user pid=1417 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280913948.840:20): user pid=1420 uid=0 auid=0 ses=2 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/0 res=success'
type=CRED_REFR msg=audit(1280913948.843:21): user pid=1420 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_ACCT msg=audit(1280915222.138:22): user pid=1906 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1280915222.144:23): user pid=1906 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=LOGIN msg=audit(1280915222.145:24): login pid=1906 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
type=USER_START msg=audit(1280915222.149:25): user pid=1906 uid=0 auid=0 ses=3 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1280915222.160:26): user pid=1908 uid=0 auid=0 ses=3 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=/dev/pts/1 res=success'
type=CRED_REFR msg=audit(1280915222.163:27): user pid=1908 uid=0 auid=0 ses=3 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=daikengo.int.fabbione.net addr=192.168.0.2 terminal=ssh res=success'