cat /var/log/messages | grep audit Oct 29 08:45:44 alexis kernel: [ 1.393343] audit: initializing netlink socket (disabled) Oct 29 08:45:44 alexis kernel: [ 1.393359] type=2000 audit(1225269924.392:1): initialized Oct 29 08:45:44 alexis kernel: [ 18.243749] type=1505 audit(1225295142.300:2): operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" name2="default" pid=5507 Oct 29 08:45:44 alexis kernel: [ 18.416432] type=1505 audit(1225295142.476:3): operation="profile_load" name="/usr/lib/cups/backend/cups-pdf" name2="default" pid=5512 Oct 29 08:45:44 alexis kernel: [ 18.416674] type=1505 audit(1225295142.476:4): operation="profile_load" name="/usr/sbin/cupsd" name2="default" pid=5512 Oct 29 08:47:29 alexis kernel: [ 127.626086] type=1503 audit(1225295249.594:5): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/7673/net/" pid=7673 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654791] type=1503 audit(1225295250.623:6): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/7677/net/" pid=7677 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654842] type=1503 audit(1225295250.623:7): operation="socket_create" family="ax25" sock_type="dgram" protocol=0 pid=7677 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654848] type=1503 audit(1225295250.623:8): operation="socket_create" family="netrom" sock_type="seqpacket" protocol=0 pid=7677 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654855] type=1503 audit(1225295250.623:9): operation="socket_create" family="rose" sock_type="dgram" protocol=0 pid=7677 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654860] type=1503 audit(1225295250.623:10): operation="socket_create" family="ipx" sock_type="dgram" protocol=0 pid=7677 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654867] type=1503 audit(1225295250.623:11): operation="socket_create" family="appletalk" sock_type="dgram" protocol=0 pid=7677 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654872] type=1503 audit(1225295250.623:12): operation="socket_create" family="econet" sock_type="dgram" protocol=0 pid=7677 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654879] type=1503 audit(1225295250.623:13): operation="socket_create" family="ash" sock_type="dgram" protocol=0 pid=7677 profile="/usr/sbin/cupsd" Oct 29 08:47:30 alexis kernel: [ 128.654884] type=1503 audit(1225295250.623:14): operation="socket_create" family="x25" sock_type="seqpacket" protocol=0 pid=7677 profile="/usr/sbin/cupsd" Oct 29 19:45:05 alexis kernel: [ 1.403512] audit: initializing netlink socket (disabled) Oct 29 19:45:05 alexis kernel: [ 1.403527] type=2000 audit(1225309485.400:1): initialized Oct 29 19:45:05 alexis kernel: [ 18.409125] type=1505 audit(1225334703.122:2): operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" name2="default" pid=5515 Oct 29 19:45:05 alexis kernel: [ 18.580569] type=1505 audit(1225334703.290:3): operation="profile_load" name="/usr/lib/cups/backend/cups-pdf" name2="default" pid=5525 Oct 29 19:45:05 alexis kernel: [ 18.580810] type=1505 audit(1225334703.290:4): operation="profile_load" name="/usr/sbin/cupsd" name2="default" pid=5525 Oct 29 19:46:46 alexis kernel: [ 123.434904] type=1503 audit(1225334806.897:5): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/7637/net/" pid=7637 profile="/usr/sbin/cupsd" Oct 29 19:46:47 alexis kernel: [ 124.463382] type=1503 audit(1225334807.924:6): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/7641/net/" pid=7641 profile="/usr/sbin/cupsd" Oct 29 19:46:47 alexis kernel: [ 124.530226] type=1503 audit(1225334807.992:7): operation="socket_create" family="ax25" sock_type="dgram" protocol=0 pid=7641 profile="/usr/sbin/cupsd" Oct 29 19:46:47 alexis kernel: [ 124.532729] type=1503 audit(1225334807.996:8): operation="socket_create" family="netrom" sock_type="seqpacket" protocol=0 pid=7641 profile="/usr/sbin/cupsd" Oct 29 19:46:48 alexis kernel: [ 124.535363] type=1503 audit(1225334807.996:9): operation="socket_create" family="rose" sock_type="dgram" protocol=0 pid=7641 profile="/usr/sbin/cupsd" Oct 29 19:46:48 alexis kernel: [ 124.537938] type=1503 audit(1225334808.000:10): operation="socket_create" family="ipx" sock_type="dgram" protocol=0 pid=7641 profile="/usr/sbin/cupsd" Oct 29 19:46:48 alexis kernel: [ 124.540495] type=1503 audit(1225334808.004:11): operation="socket_create" family="appletalk" sock_type="dgram" protocol=0 pid=7641 profile="/usr/sbin/cupsd" Oct 29 19:46:48 alexis kernel: [ 124.543141] type=1503 audit(1225334808.004:12): operation="socket_create" family="econet" sock_type="dgram" protocol=0 pid=7641 profile="/usr/sbin/cupsd" Oct 29 19:46:48 alexis kernel: [ 124.543151] type=1503 audit(1225334808.004:13): operation="socket_create" family="ash" sock_type="dgram" protocol=0 pid=7641 profile="/usr/sbin/cupsd" Oct 29 19:46:48 alexis kernel: [ 124.543157] type=1503 audit(1225334808.004:14): operation="socket_create" family="x25" sock_type="seqpacket" protocol=0 pid=7641 profile="/usr/sbin/cupsd" Oct 30 09:09:50 alexis kernel: [ 1.393707] audit: initializing netlink socket (disabled) Oct 30 09:09:50 alexis kernel: [ 1.393722] type=2000 audit(1225357722.392:1): initialized Oct 30 09:09:50 alexis kernel: [ 67.067033] type=1505 audit(1225382989.121:2): operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" name2="default" pid=8007 Oct 30 09:09:50 alexis kernel: [ 67.237601] type=1505 audit(1225382989.293:3): operation="profile_load" name="/usr/lib/cups/backend/cups-pdf" name2="default" pid=8015 Oct 30 09:09:50 alexis kernel: [ 67.237839] type=1505 audit(1225382989.293:4): operation="profile_load" name="/usr/sbin/cupsd" name2="default" pid=8015 Oct 30 09:11:31 alexis kernel: [ 170.737444] type=1503 audit(1225383091.874:5): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/10154/net/" pid=10154 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.770835] type=1503 audit(1225383092.905:6): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/10158/net/" pid=10158 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.827605] type=1503 audit(1225383092.961:7): operation="socket_create" family="ax25" sock_type="dgram" protocol=0 pid=10158 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.827618] type=1503 audit(1225383092.961:8): operation="socket_create" family="netrom" sock_type="seqpacket" protocol=0 pid=10158 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.827625] type=1503 audit(1225383092.961:9): operation="socket_create" family="rose" sock_type="dgram" protocol=0 pid=10158 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.827632] type=1503 audit(1225383092.961:10): operation="socket_create" family="ipx" sock_type="dgram" protocol=0 pid=10158 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.827639] type=1503 audit(1225383092.961:11): operation="socket_create" family="appletalk" sock_type="dgram" protocol=0 pid=10158 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.827646] type=1503 audit(1225383092.961:12): operation="socket_create" family="econet" sock_type="dgram" protocol=0 pid=10158 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.827653] type=1503 audit(1225383092.961:13): operation="socket_create" family="ash" sock_type="dgram" protocol=0 pid=10158 profile="/usr/sbin/cupsd" Oct 30 09:11:32 alexis kernel: [ 171.827659] type=1503 audit(1225383092.961:14): operation="socket_create" family="x25" sock_type="seqpacket" protocol=0 pid=10158 profile="/usr/sbin/cupsd" Oct 30 20:39:53 alexis kernel: [41472.571911] type=1503 audit(1225424393.706:16): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/21002/net/" pid=21002 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.650759] type=1503 audit(1225424394.786:17): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/21006/net/" pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.653825] type=1503 audit(1225424394.790:18): operation="socket_create" family="ax25" sock_type="dgram" protocol=0 pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.656021] type=1503 audit(1225424394.790:19): operation="socket_create" family="netrom" sock_type="seqpacket" protocol=0 pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.658466] type=1503 audit(1225424394.794:20): operation="socket_create" family="rose" sock_type="dgram" protocol=0 pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.660895] type=1503 audit(1225424394.794:21): operation="socket_create" family="ipx" sock_type="dgram" protocol=0 pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.663760] type=1503 audit(1225424394.798:22): operation="socket_create" family="appletalk" sock_type="dgram" protocol=0 pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.666080] type=1503 audit(1225424394.802:23): operation="socket_create" family="econet" sock_type="dgram" protocol=0 pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.666090] type=1503 audit(1225424394.802:24): operation="socket_create" family="ash" sock_type="dgram" protocol=0 pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:39:54 alexis kernel: [41473.666096] type=1503 audit(1225424394.802:25): operation="socket_create" family="x25" sock_type="seqpacket" protocol=0 pid=21006 profile="/usr/sbin/cupsd" Oct 30 20:40:09 alexis kernel: [41488.234061] type=1503 audit(1225424409.369:27): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/21090/net/" pid=21090 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258186] type=1503 audit(1225424410.393:28): operation="inode_permission" requested_mask="r::" denied_mask="r::" fsuid=7 name="/proc/21094/net/" pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258244] type=1503 audit(1225424410.393:29): operation="socket_create" family="ax25" sock_type="dgram" protocol=0 pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258251] type=1503 audit(1225424410.393:30): operation="socket_create" family="netrom" sock_type="seqpacket" protocol=0 pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258256] type=1503 audit(1225424410.393:31): operation="socket_create" family="rose" sock_type="dgram" protocol=0 pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258262] type=1503 audit(1225424410.393:32): operation="socket_create" family="ipx" sock_type="dgram" protocol=0 pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258267] type=1503 audit(1225424410.393:33): operation="socket_create" family="appletalk" sock_type="dgram" protocol=0 pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258273] type=1503 audit(1225424410.393:34): operation="socket_create" family="econet" sock_type="dgram" protocol=0 pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258279] type=1503 audit(1225424410.393:35): operation="socket_create" family="ash" sock_type="dgram" protocol=0 pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:40:10 alexis kernel: [41489.258285] type=1503 audit(1225424410.393:36): operation="socket_create" family="x25" sock_type="seqpacket" protocol=0 pid=21094 profile="/usr/sbin/cupsd" Oct 30 20:51:43 alexis kernel: [42182.792664] type=1505 audit(1225425103.926:38): operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" name2="default" pid=22092 Oct 30 20:51:43 alexis kernel: [42182.793767] type=1505 audit(1225425103.930:39): operation="profile_replace" name="/usr/sbin/cupsd" name2="default" pid=22092