I only get these now:
[170986.269229] type=1505 audit(1220449138.810:6): operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" name2="default" pid=5738 [170986.269510] type=1505 audit(1220449138.810:7): operation="profile_replace" name="/usr/sbin/cupsd" name2="default" pid=5738
I only get these now:
[170986.269229] type=1505 audit(122044913 8.810:6) : operation= "profile_ replace" name="/ usr/lib/ cups/backend/ cups-pdf" name2="default" pid=5738 8.810:7) : operation= "profile_ replace" name="/ usr/sbin/ cupsd" name2="default" pid=5738
[170986.269510] type=1505 audit(122044913