Aug 22 22:47:31 mag kernel: [32995.179742] type=1502 audit(1282506451.969:46):  operation="mknod" pid=2371 parent=1 profile="/usr/sbin/nmbd" requested_mask="c::" denied_mask="c::" fsuid=0 ouid=0 name="/var/run/samba/namelist.debug"
Aug 22 22:47:31 mag kernel: [32995.179768] type=1502 audit(1282506451.969:47):  operation="open" pid=2371 parent=1 profile="/usr/sbin/nmbd" requested_mask="wc::" denied_mask="wc::" fsuid=0 ouid=0 name="/var/run/samba/namelist.debug"
Aug 22 22:47:32 mag kernel: [32995.318438] type=1502 audit(1282506452.109:48):  operation="truncate" pid=2371 parent=1 profile="/usr/sbin/nmbd" requested_mask="w::" denied_mask="w::" fsuid=0 ouid=0 name="/var/run/samba/namelist.debug"
Aug 22 22:47:32 mag kernel: [32995.318472] type=1502 audit(1282506452.109:49):  operation="open" pid=2371 parent=1 profile="/usr/sbin/nmbd" requested_mask="wc::" denied_mask="wc::" fsuid=0 ouid=0 name="/var/run/samba/namelist.debug"
Aug 23 10:16:41 mag kernel: [64711.316331] type=1505 audit(1282547801.690:50):  operation="profile_replace" pid=31716 name="/usr/sbin/avahi-daemon"
Aug 23 12:21:39 mag kernel: [    0.012026] Security Framework initialized
Aug 23 12:21:39 mag kernel: [    0.012048] AppArmor: AppArmor initialized
Aug 23 12:21:39 mag kernel: [    0.218486] AppArmor: AppArmor Filesystem Enabled
Aug 23 12:21:39 mag kernel: [    0.260906] type=2000 audit(1282555286.259:1): initialized
Aug 23 12:21:39 mag kernel: [    7.115296] type=1505 audit(1282555294.101:2):  operation="profile_load" pid=538 name="/sbin/dhclient3"
Aug 23 12:21:39 mag kernel: [    7.115937] type=1505 audit(1282555294.101:3):  operation="profile_load" pid=538 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
Aug 23 12:21:39 mag kernel: [    7.116293] type=1505 audit(1282555294.101:4):  operation="profile_load" pid=538 name="/usr/lib/connman/scripts/dhclient-script"
Aug 23 12:21:39 mag kernel: [   12.210002] type=1505 audit(1282555299.196:5):  operation="profile_load" pid=975 name="/bin/ping"
Aug 23 12:21:39 mag kernel: [   12.249116] type=1505 audit(1282555299.236:6):  operation="profile_load" pid=976 name="/usr/share/gdm/guest-session/Xsession"
Aug 23 12:21:39 mag kernel: [   12.251680] type=1505 audit(1282555299.236:7):  operation="profile_replace" pid=977 name="/sbin/dhclient3"
Aug 23 12:21:39 mag kernel: [   12.252327] type=1505 audit(1282555299.240:8):  operation="profile_replace" pid=977 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
Aug 23 12:21:39 mag kernel: [   12.252674] type=1505 audit(1282555299.240:9):  operation="profile_replace" pid=977 name="/usr/lib/connman/scripts/dhclient-script"
Aug 23 12:21:39 mag kernel: [   12.301323] type=1505 audit(1282555299.288:10):  operation="profile_load" pid=978 name="/sbin/klogd"
Aug 23 12:21:39 mag kernel: [   12.334214] type=1505 audit(1282555299.321:11):  operation="profile_load" pid=979 name="/sbin/syslog-ng"
Aug 23 12:21:39 mag kernel: [   12.365425] type=1505 audit(1282555299.353:12):  operation="profile_load" pid=980 name="/sbin/syslogd"
Aug 23 12:21:39 mag kernel: [   12.622304] type=1505 audit(1282555299.609:13):  operation="profile_load" pid=981 name="/usr/bin/evince"
Aug 23 12:21:39 mag kernel: [   12.630444] type=1505 audit(1282555299.616:14):  operation="profile_load" pid=981 name="/usr/bin/evince-previewer"
Aug 23 12:21:44 mag kernel: [   17.553810] type=1505 audit(1282555304.541:44):  operation="profile_replace" pid=1195 name="/usr/sbin/mysqld"
Aug 23 12:22:41 mag kernel: [   74.582328] type=1502 audit(1282555361.570:45):  operation="chmod" pid=2389 parent=1 profile="/usr/sbin/nmbd" requested_mask="w::" denied_mask="w::" fsuid=0 ouid=0 name="/var/log/samba/cores/"
Aug 23 13:54:08 mag kernel: [    0.016025] Security Framework initialized
Aug 23 13:54:08 mag kernel: [    0.016048] AppArmor: AppArmor initialized
Aug 23 13:54:08 mag kernel: [    0.222484] AppArmor: AppArmor Filesystem Enabled
Aug 23 13:54:08 mag kernel: [    0.265366] type=2000 audit(1282560819.263:1): initialized
Aug 23 13:54:08 mag kernel: [   24.221038] type=1505 audit(1282560844.236:2):  operation="profile_load" pid=718 name="/sbin/dhclient3"
Aug 23 13:54:08 mag kernel: [   24.221678] type=1505 audit(1282560844.236:3):  operation="profile_load" pid=718 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
Aug 23 13:54:08 mag kernel: [   24.222019] type=1505 audit(1282560844.236:4):  operation="profile_load" pid=718 name="/usr/lib/connman/scripts/dhclient-script"
Aug 23 13:54:08 mag kernel: [   28.748657] type=1505 audit(1282560848.764:5):  operation="profile_load" pid=973 name="/usr/sbin/avahi-daemon"
Aug 23 13:54:08 mag kernel: [   28.769607] type=1505 audit(1282560848.784:6):  operation="profile_load" pid=997 name="/bin/ping"
Aug 23 13:54:08 mag kernel: [   28.777348] type=1505 audit(1282560848.792:7):  operation="profile_load" pid=998 name="/usr/share/gdm/guest-session/Xsession"
Aug 23 13:54:08 mag kernel: [   28.781127] type=1505 audit(1282560848.796:8):  operation="profile_replace" pid=1001 name="/sbin/dhclient3"
Aug 23 13:54:08 mag kernel: [   28.781777] type=1505 audit(1282560848.796:9):  operation="profile_replace" pid=1001 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
Aug 23 13:54:08 mag kernel: [   28.782123] type=1505 audit(1282560848.796:10):  operation="profile_replace" pid=1001 name="/usr/lib/connman/scripts/dhclient-script"
Aug 23 13:54:08 mag kernel: [   28.786232] type=1505 audit(1282560848.800:11):  operation="profile_load" pid=1002 name="/sbin/klogd"
Aug 23 13:54:29 mag kernel: [   49.861424] type=1502 audit(1282560869.876:45):  operation="chmod" pid=2549 parent=1 profile="/usr/sbin/nmbd" requested_mask="w::" denied_mask="w::" fsuid=0 ouid=0 name="/var/log/samba/cores/"
Aug 23 15:09:06 mag kernel: [ 4526.853958] type=1505 audit(1282565346.869:46):  operation="profile_replace" pid=8824 name="/usr/sbin/mysqld"
Aug 23 15:43:12 mag kernel: [ 6571.981883] type=1505 audit(1282567391.997:47):  operation="profile_replace" pid=5851 name="/sbin/dhclient3"
Aug 23 15:43:12 mag kernel: [ 6571.982006] type=1505 audit(1282567391.997:48):  operation="profile_replace" pid=5851 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
Aug 23 15:43:12 mag kernel: [ 6571.982087] type=1505 audit(1282567391.997:49):  operation="profile_replace" pid=5851 name="/usr/lib/connman/scripts/dhclient-script"
Aug 23 15:43:32 mag kernel: [ 6592.612703] SGI XFS with ACLs, security attributes, realtime, large block/inode numbers, no debug enabled
Aug 23 15:44:41 mag kernel: [ 6661.630752] type=1505 audit(1282567481.644:50):  operation="profile_replace" pid=6710 name="/usr/sbin/tcpdump"
Aug 23 15:46:44 mag kernel: [ 6784.673043] type=1505 audit(1282567604.688:51):  operation="profile_replace" pid=10290 name="/usr/lib/cups/backend/cups-pdf"
Aug 23 15:46:44 mag kernel: [ 6784.673242] type=1505 audit(1282567604.688:52):  operation="profile_replace" pid=10290 name="/usr/sbin/cupsd"
Aug 23 15:48:08 mag kernel: [ 6868.549158] type=1502 audit(1282567688.565:53):  operation="chmod" pid=13321 parent=1 profile="/usr/sbin/smbd" requested_mask="w::" denied_mask="w::" fsuid=0 ouid=0 name="/var/log/samba/cores/"
Aug 23 15:48:08 mag kernel: [ 6868.812001] type=1502 audit(1282567688.824:54):  operation="chmod" pid=13326 parent=1 profile="/usr/sbin/nmbd" requested_mask="w::" denied_mask="w::" fsuid=0 ouid=0 name="/var/log/samba/cores/"
Aug 23 15:49:58 mag kernel: [ 6978.104834] type=1505 audit(1282567798.117:55):  operation="profile_replace" pid=19943 name="/usr/sbin/mysqld"
Aug 23 15:49:58 mag kernel: [ 6978.163355] type=1505 audit(1282567798.176:56):  operation="profile_replace" pid=19947 name="/usr/sbin/mysqld"
Aug 23 15:50:09 mag kernel: [ 6989.131361] type=1505 audit(1282567809.145:57):  operation="profile_replace" pid=20088 name="/bin/ping"
Aug 23 15:50:09 mag kernel: [ 6989.133674] type=1505 audit(1282567809.149:58):  operation="profile_replace" pid=20090 name="/sbin/dhclient3"
Aug 23 15:50:09 mag kernel: [ 6989.134337] type=1505 audit(1282567809.149:59):  operation="profile_replace" pid=20090 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
Aug 23 15:50:09 mag kernel: [ 6989.134711] type=1505 audit(1282567809.149:60):  operation="profile_replace" pid=20090 name="/usr/lib/connman/scripts/dhclient-script"
Aug 23 15:50:09 mag kernel: [ 6989.148117] type=1505 audit(1282567809.161:61):  operation="profile_replace" pid=20089 name="/usr/share/gdm/guest-session/Xsession"
Aug 23 15:50:09 mag kernel: [ 6989.156052] type=1505 audit(1282567809.169:62):  operation="profile_replace" pid=20091 name="/sbin/klogd"
Aug 23 15:50:09 mag kernel: [ 6989.255560] type=1505 audit(1282567809.269:63):  operation="profile_replace" pid=20092 name="/sbin/syslogd"
Aug 23 15:50:09 mag kernel: [ 6989.256344] type=1505 audit(1282567809.269:64):  operation="profile_replace" pid=20093 name="/sbin/syslog-ng"
Aug 23 15:50:09 mag kernel: [ 6989.333462] type=1505 audit(1282567809.348:65):  operation="profile_replace" pid=20094 name="/usr/bin/evince"
Aug 23 15:50:09 mag kernel: [ 6989.351454] type=1505 audit(1282567809.364:66):  operation="profile_replace" pid=20094 name="/usr/bin/evince-previewer"
Aug 23 15:50:16 mag kernel: [ 6996.070121] type=1505 audit(1282567816.085:114):  operation="profile_replace" pid=20160 name="/usr/bin/evince"
Aug 23 15:50:16 mag kernel: [ 6996.071266] type=1505 audit(1282567816.085:115):  operation="profile_replace" pid=20160 name="/usr/bin/evince-previewer"
Aug 23 15:50:16 mag kernel: [ 6996.072094] type=1505 audit(1282567816.085:116):  operation="profile_replace" pid=20160 name="/usr/bin/evince-thumbnailer"
Aug 23 15:50:16 mag kernel: [ 6996.159266] type=1505 audit(1282567816.173:117):  operation="profile_replace" pid=20259 name="/usr/sbin/avahi-daemon"
Aug 23 15:50:16 mag kernel: [ 6996.608759] type=1505 audit(1282567816.621:118):  operation="profile_replace" pid=20260 name="/usr/lib/cups/backend/cups-pdf"
Aug 23 15:50:16 mag kernel: [ 6996.608968] type=1505 audit(1282567816.621:119):  operation="profile_replace" pid=20260 name="/usr/sbin/cupsd"
Aug 23 15:50:16 mag kernel: [ 6996.712114] type=1505 audit(1282567816.725:120):  operation="profile_replace" pid=20261 name="/usr/sbin/dnsmasq"
Aug 23 15:50:16 mag kernel: [ 6996.866124] type=1505 audit(1282567816.881:121):  operation="profile_replace" pid=20262 name="/usr/sbin/dovecot"
Aug 23 15:50:17 mag kernel: [ 6997.005436] type=1505 audit(1282567817.021:122):  operation="profile_replace" pid=20263 name="/usr/sbin/identd"
Aug 23 15:50:17 mag kernel: [ 6997.712415] type=1505 audit(1282567817.725:123):  operation="profile_replace" pid=20264 name="/usr/sbin/libvirtd"
Aug 23 15:50:40 mag kernel: [ 7020.636283] type=1505 audit(1282567840.652:133):  operation="profile_replace" pid=20801 name="/usr/lib/firefox-3.6.8/firefox-*bin"
Aug 23 15:50:40 mag kernel: [ 7020.639762] type=1505 audit(1282567840.652:134):  operation="profile_replace" pid=20801 name="/usr/lib/firefox-3.6.8/firefox-*bin//firefox_java"
Aug 23 15:50:40 mag kernel: [ 7020.641856] type=1505 audit(1282567840.656:135):  operation="profile_replace" pid=20801 name="/usr/lib/firefox-3.6.8/firefox-*bin//firefox_openjdk"