type=LOGIN msg=audit(1463441701.643:9016673): pid=1845 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3009 res=1
type=USER_START msg=audit(1463441701.643:9016674): pid=1845 uid=0 auid=0 ses=3009 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463441701.647:9016675): pid=1845 uid=0 auid=0 ses=3009 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463441701.647:9016676): pid=1845 uid=0 auid=0 ses=3009 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463442301.655:9016677): pid=2606 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463442301.655:9016678): pid=2606 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463442301.655:9016679): pid=2606 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3010 res=1
type=USER_START msg=audit(1463442301.655:9016680): pid=2606 uid=0 auid=0 ses=3010 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463442301.659:9016681): pid=2606 uid=0 auid=0 ses=3010 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463442301.659:9016682): pid=2606 uid=0 auid=0 ses=3010 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463442901.667:9016683): pid=3515 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463442901.667:9016684): pid=3515 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463442901.667:9016685): pid=3515 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3011 res=1
type=USER_START msg=audit(1463442901.667:9016686): pid=3515 uid=0 auid=0 ses=3011 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463442901.671:9016687): pid=3515 uid=0 auid=0 ses=3011 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463442901.671:9016688): pid=3515 uid=0 auid=0 ses=3011 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463443501.679:9016689): pid=4429 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463443501.679:9016690): pid=4429 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463443501.679:9016691): pid=4429 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3012 res=1
type=USER_START msg=audit(1463443501.679:9016692): pid=4429 uid=0 auid=0 ses=3012 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463443501.683:9016693): pid=4429 uid=0 auid=0 ses=3012 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463443501.683:9016694): pid=4429 uid=0 auid=0 ses=3012 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463444101.688:9016695): pid=5145 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463444101.688:9016696): pid=5145 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463444101.688:9016697): pid=5145 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3013 res=1
type=USER_START msg=audit(1463444101.692:9016698): pid=5145 uid=0 auid=0 ses=3013 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463444101.692:9016699): pid=5145 uid=0 auid=0 ses=3013 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463444101.692:9016700): pid=5145 uid=0 auid=0 ses=3013 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463444221.700:9016701): pid=5421 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463444221.700:9016702): pid=5421 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463444221.700:9016703): pid=5421 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3014 res=1
type=USER_START msg=audit(1463444221.700:9016704): pid=5421 uid=0 auid=0 ses=3014 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463444221.704:9016705): pid=5421 uid=0 auid=0 ses=3014 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463444221.704:9016706): pid=5421 uid=0 auid=0 ses=3014 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463444701.708:9016707): pid=6042 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463444701.708:9016708): pid=6042 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463444701.712:9016709): pid=6042 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3015 res=1
type=USER_START msg=audit(1463444701.712:9016710): pid=6042 uid=0 auid=0 ses=3015 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463444701.712:9016711): pid=6042 uid=0 auid=0 ses=3015 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463444701.712:9016712): pid=6042 uid=0 auid=0 ses=3015 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463445078.788:9016713): pid=6495 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463445078.788:9016714): pid=6495 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463445078.960:9016715): pid=6495 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463445084.360:9016716): pid=6495 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463445084.568:9016717): pid=6495 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463445084.580:9016718): pid=6722 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463445084.580:9016719): pid=6722 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463445084.708:9016720): pid=6722 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463445088.936:9016721): pid=6722 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463445089.144:9016722): pid=6722 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463445089.156:9016723): pid=6945 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463445089.156:9016724): pid=6945 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463445089.296:9016725): pid=6945 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463445093.036:9016726): pid=6945 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463445093.228:9016727): pid=6945 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463445093.236:9016728): pid=7158 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463445093.240:9016729): pid=7158 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463445093.368:9016730): pid=7158 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463445098.768:9016731): pid=7158 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463445098.976:9016732): pid=7158 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463445098.988:9016733): pid=7373 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463445098.988:9016734): pid=7373 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463445099.104:9016735): pid=7373 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463445103.080:9016736): pid=7373 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463445103.264:9016737): pid=7373 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463445103.272:9016738): pid=7587 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463445103.272:9016739): pid=7587 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463445103.372:9016740): pid=7587 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463445108.948:9016741): pid=7587 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463445109.120:9016742): pid=7587 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463445109.128:9016743): pid=7803 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463445109.128:9016744): pid=7803 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463445109.240:9016745): pid=7803 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463445110.888:9016746): pid=7803 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463445111.056:9016747): pid=7803 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463445111.064:9016748): pid=8076 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463445111.064:9016749): pid=8076 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463445111.172:9016750): pid=8076 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463445112.772:9016751): pid=8076 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463445112.972:9016752): pid=8076 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463445121.720:9016753): pid=8365 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463445121.720:9016754): pid=8365 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463445121.720:9016755): pid=8365 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3016 res=1
type=USER_START msg=audit(1463445121.720:9016756): pid=8365 uid=0 auid=0 ses=3016 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463445121.728:9016757): pid=8365 uid=0 auid=0 ses=3016 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463445121.728:9016758): pid=8365 uid=0 auid=0 ses=3016 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463445301.731:9016759): pid=8604 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463445301.731:9016760): pid=8604 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463445301.731:9016761): pid=8604 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3017 res=1
type=USER_START msg=audit(1463445301.731:9016762): pid=8604 uid=0 auid=0 ses=3017 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463445301.735:9016763): pid=8604 uid=0 auid=0 ses=3017 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463445301.735:9016764): pid=8604 uid=0 auid=0 ses=3017 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463445901.743:9016765): pid=9389 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463445901.743:9016766): pid=9389 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463445901.743:9016767): pid=9389 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3018 res=1
type=USER_START msg=audit(1463445901.743:9016768): pid=9389 uid=0 auid=0 ses=3018 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463445901.747:9016769): pid=9389 uid=0 auid=0 ses=3018 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463445901.747:9016770): pid=9389 uid=0 auid=0 ses=3018 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463446501.755:9016771): pid=10072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463446501.755:9016772): pid=10072 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463446501.755:9016773): pid=10072 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3019 res=1
type=USER_START msg=audit(1463446501.755:9016774): pid=10072 uid=0 auid=0 ses=3019 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463446501.759:9016775): pid=10072 uid=0 auid=0 ses=3019 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463446501.759:9016776): pid=10072 uid=0 auid=0 ses=3019 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463447101.766:9016777): pid=10777 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463447101.766:9016778): pid=10777 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463447101.766:9016779): pid=10777 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3020 res=1
type=USER_START msg=audit(1463447101.766:9016780): pid=10777 uid=0 auid=0 ses=3020 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463447101.770:9016781): pid=10777 uid=0 auid=0 ses=3020 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463447101.770:9016782): pid=10777 uid=0 auid=0 ses=3020 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463447701.781:9016783): pid=11477 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463447701.781:9016784): pid=11477 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463447701.781:9016785): pid=11477 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3021 res=1
type=USER_START msg=audit(1463447701.781:9016786): pid=11477 uid=0 auid=0 ses=3021 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463447701.785:9016787): pid=11477 uid=0 auid=0 ses=3021 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463447701.785:9016788): pid=11477 uid=0 auid=0 ses=3021 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463447821.793:9016789): pid=11616 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463447821.793:9016790): pid=11616 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463447821.793:9016791): pid=11616 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3022 res=1
type=USER_START msg=audit(1463447821.793:9016792): pid=11616 uid=0 auid=0 ses=3022 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463447821.797:9016793): pid=11616 uid=0 auid=0 ses=3022 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463447821.797:9016794): pid=11616 uid=0 auid=0 ses=3022 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1463447878.865:9016795): pid=11680 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=USER_ACCT msg=audit(1463447878.865:9016796): pid=11680 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=USER_CMD msg=audit(1463447878.869:9016797): pid=11680 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/ubuntu/sources" cmd=6170742D67657420757064617465 terminal=pts/28 res=success'
type=CRED_REFR msg=audit(1463447878.869:9016798): pid=11680 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=USER_START msg=audit(1463447878.869:9016799): pid=11680 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=USER_END msg=audit(1463447892.745:9016800): pid=11680 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=CRED_DISP msg=audit(1463447892.745:9016801): pid=11680 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=USER_CMD msg=audit(1463447892.749:9016802): pid=13618 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/ubuntu/sources" cmd=6170742D676574202D7520646973742D75706772616465 terminal=pts/28 res=success'
type=CRED_REFR msg=audit(1463447892.749:9016803): pid=13618 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=USER_START msg=audit(1463447892.749:9016804): pid=13618 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=USER_END msg=audit(1463447893.341:9016805): pid=13618 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=CRED_DISP msg=audit(1463447893.341:9016806): pid=13618 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/28 res=success'
type=USER_START msg=audit(1463447900.173:9016807): pid=13635 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463448301.800:9016808): pid=14148 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463448301.804:9016809): pid=14148 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463448301.804:9016810): pid=14148 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3023 res=1
type=USER_START msg=audit(1463448301.804:9016811): pid=14148 uid=0 auid=0 ses=3023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463448301.808:9016812): pid=14148 uid=0 auid=0 ses=3023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463448301.808:9016813): pid=14148 uid=0 auid=0 ses=3023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463448901.811:9016814): pid=15533 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463448901.815:9016815): pid=15533 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463448901.815:9016816): pid=15533 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3024 res=1
type=USER_START msg=audit(1463448901.815:9016817): pid=15533 uid=0 auid=0 ses=3024 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463448901.819:9016818): pid=15533 uid=0 auid=0 ses=3024 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463448901.819:9016819): pid=15533 uid=0 auid=0 ses=3024 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463449501.822:9016820): pid=16248 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463449501.826:9016821): pid=16248 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463449501.826:9016822): pid=16248 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3025 res=1
type=USER_START msg=audit(1463449501.826:9016823): pid=16248 uid=0 auid=0 ses=3025 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463449501.830:9016824): pid=16248 uid=0 auid=0 ses=3025 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463449501.830:9016825): pid=16248 uid=0 auid=0 ses=3025 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463450101.834:9016826): pid=16992 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463450101.834:9016827): pid=16992 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463450101.834:9016828): pid=16992 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3026 res=1
type=USER_START msg=audit(1463450101.838:9016829): pid=16992 uid=0 auid=0 ses=3026 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463450101.838:9016830): pid=16992 uid=0 auid=0 ses=3026 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463450101.842:9016831): pid=16992 uid=0 auid=0 ses=3026 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463450701.846:9016832): pid=17684 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463450701.846:9016833): pid=17684 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463450701.846:9016834): pid=17684 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3027 res=1
type=USER_START msg=audit(1463450701.850:9016835): pid=17684 uid=0 auid=0 ses=3027 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463450701.850:9016836): pid=17684 uid=0 auid=0 ses=3027 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463450701.854:9016837): pid=17684 uid=0 auid=0 ses=3027 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463451301.862:9016838): pid=18380 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463451301.862:9016839): pid=18380 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463451301.862:9016840): pid=18380 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3028 res=1
type=USER_START msg=audit(1463451301.866:9016841): pid=18380 uid=0 auid=0 ses=3028 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463451301.866:9016842): pid=18380 uid=0 auid=0 ses=3028 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463451301.866:9016843): pid=18380 uid=0 auid=0 ses=3028 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463451421.874:9016844): pid=18519 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463451421.874:9016845): pid=18519 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463451421.874:9016846): pid=18519 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3029 res=1
type=USER_START msg=audit(1463451421.874:9016847): pid=18519 uid=0 auid=0 ses=3029 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463451421.878:9016848): pid=18519 uid=0 auid=0 ses=3029 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463451421.878:9016849): pid=18519 uid=0 auid=0 ses=3029 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463451901.882:9016850): pid=19070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463451901.882:9016851): pid=19070 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463451901.882:9016852): pid=19070 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3030 res=1
type=USER_START msg=audit(1463451901.882:9016853): pid=19070 uid=0 auid=0 ses=3030 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463451901.886:9016854): pid=19070 uid=0 auid=0 ses=3030 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463451901.886:9016855): pid=19070 uid=0 auid=0 ses=3030 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463452501.894:9016856): pid=19768 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463452501.894:9016857): pid=19768 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463452501.894:9016858): pid=19768 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3031 res=1
type=USER_START msg=audit(1463452501.894:9016859): pid=19768 uid=0 auid=0 ses=3031 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463452501.898:9016860): pid=19768 uid=0 auid=0 ses=3031 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463452501.898:9016861): pid=19768 uid=0 auid=0 ses=3031 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463452669.706:9016862): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=apt-daily comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463452669.706:9016863): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=apt-daily comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1463452760.306:9016864): pid=22049 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463453101.906:9016865): pid=22487 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463453101.906:9016866): pid=22487 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463453101.906:9016867): pid=22487 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3032 res=1
type=USER_START msg=audit(1463453101.906:9016868): pid=22487 uid=0 auid=0 ses=3032 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463453101.910:9016869): pid=22487 uid=0 auid=0 ses=3032 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463453101.910:9016870): pid=22487 uid=0 auid=0 ses=3032 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463453701.918:9016871): pid=23190 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463453701.918:9016872): pid=23190 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463453701.918:9016873): pid=23190 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3033 res=1
type=USER_START msg=audit(1463453701.918:9016874): pid=23190 uid=0 auid=0 ses=3033 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463453701.922:9016875): pid=23190 uid=0 auid=0 ses=3033 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463453701.922:9016876): pid=23190 uid=0 auid=0 ses=3033 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463454001.926:9016877): pid=23552 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463454001.926:9016878): pid=23552 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463454001.926:9016879): pid=23552 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3034 res=1
type=USER_ACCT msg=audit(1463454001.926:9016880): pid=23553 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463454001.926:9016881): pid=23553 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="sarnold" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463454001.926:9016882): pid=23553 uid=0 old-auid=4294967295 auid=1000 old-ses=4294967295 ses=3035 res=1
type=USER_START msg=audit(1463454001.926:9016883): pid=23552 uid=0 auid=0 ses=3034 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1463454001.930:9016884): pid=23553 uid=0 auid=1000 ses=3035 msg='op=PAM:session_open acct="sarnold" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463454181.602:9016885): pid=23552 uid=0 auid=0 ses=3034 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463454181.602:9016886): pid=23552 uid=0 auid=0 ses=3034 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463454301.606:9016887): pid=7679 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463454301.606:9016888): pid=7679 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463454301.606:9016889): pid=7679 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3036 res=1
type=USER_START msg=audit(1463454301.610:9016890): pid=7679 uid=0 auid=0 ses=3036 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463454301.610:9016891): pid=7679 uid=0 auid=0 ses=3036 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463454301.610:9016892): pid=7679 uid=0 auid=0 ses=3036 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463454519.886:9016893): pid=23553 uid=0 auid=1000 ses=3035 msg='op=PAM:setcred acct="sarnold" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463454519.886:9016894): pid=23553 uid=0 auid=1000 ses=3035 msg='op=PAM:session_close acct="sarnold" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463454901.894:9016895): pid=8382 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463454901.894:9016896): pid=8382 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463454901.894:9016897): pid=8382 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3037 res=1
type=USER_START msg=audit(1463454901.894:9016898): pid=8382 uid=0 auid=0 ses=3037 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463454901.898:9016899): pid=8382 uid=0 auid=0 ses=3037 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463454901.898:9016900): pid=8382 uid=0 auid=0 ses=3037 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463455021.902:9016901): pid=8522 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463455021.902:9016902): pid=8522 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463455021.902:9016903): pid=8522 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3038 res=1
type=USER_START msg=audit(1463455021.902:9016904): pid=8522 uid=0 auid=0 ses=3038 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463455021.906:9016905): pid=8522 uid=0 auid=0 ses=3038 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463455021.906:9016906): pid=8522 uid=0 auid=0 ses=3038 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463455501.914:9016907): pid=9097 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463455501.914:9016908): pid=9097 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463455501.914:9016909): pid=9097 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3039 res=1
type=USER_START msg=audit(1463455501.914:9016910): pid=9097 uid=0 auid=0 ses=3039 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463455501.918:9016911): pid=9097 uid=0 auid=0 ses=3039 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463455501.918:9016912): pid=9097 uid=0 auid=0 ses=3039 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463456101.930:9016913): pid=9834 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463456101.930:9016914): pid=9834 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463456101.930:9016915): pid=9834 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3040 res=1
type=USER_START msg=audit(1463456101.930:9016916): pid=9834 uid=0 auid=0 ses=3040 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463456101.930:9016917): pid=9834 uid=0 auid=0 ses=3040 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463456101.930:9016918): pid=9834 uid=0 auid=0 ses=3040 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1463456119.150:9016919): pid=9855 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_ACCT msg=audit(1463456119.150:9016920): pid=9855 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_CMD msg=audit(1463456119.150:9016921): pid=9855 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/trees/ImageMagick" cmd=6170742D67657420757064617465 terminal=pts/17 res=success'
type=CRED_REFR msg=audit(1463456119.150:9016922): pid=9855 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_START msg=audit(1463456119.150:9016923): pid=9855 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_END msg=audit(1463456129.442:9016924): pid=9855 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=CRED_DISP msg=audit(1463456129.442:9016925): pid=9855 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_CMD msg=audit(1463456129.446:9016926): pid=11776 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/trees/ImageMagick" cmd=6170742D676574202D7520646973742D75706772616465 terminal=pts/17 res=success'
type=CRED_REFR msg=audit(1463456129.446:9016927): pid=11776 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_START msg=audit(1463456129.446:9016928): pid=11776 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_END msg=audit(1463456130.078:9016929): pid=11776 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=CRED_DISP msg=audit(1463456130.078:9016930): pid=11776 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_START msg=audit(1463456180.250:9016931): pid=11849 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463456701.934:9016932): pid=12491 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463456701.934:9016933): pid=12491 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463456701.934:9016934): pid=12491 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3041 res=1
type=USER_START msg=audit(1463456701.934:9016935): pid=12491 uid=0 auid=0 ses=3041 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463456701.938:9016936): pid=12491 uid=0 auid=0 ses=3041 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463456701.938:9016937): pid=12491 uid=0 auid=0 ses=3041 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463457301.946:9016938): pid=13192 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463457301.946:9016939): pid=13192 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463457301.946:9016940): pid=13192 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3042 res=1
type=USER_START msg=audit(1463457301.946:9016941): pid=13192 uid=0 auid=0 ses=3042 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463457301.950:9016942): pid=13192 uid=0 auid=0 ses=3042 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463457301.950:9016943): pid=13192 uid=0 auid=0 ses=3042 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463457901.954:9016944): pid=13929 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463457901.954:9016945): pid=13929 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463457901.954:9016946): pid=13929 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3043 res=1
type=USER_START msg=audit(1463457901.958:9016947): pid=13929 uid=0 auid=0 ses=3043 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463457901.962:9016948): pid=13929 uid=0 auid=0 ses=3043 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463457901.962:9016949): pid=13929 uid=0 auid=0 ses=3043 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AVC msg=audit(1463458062.294:9016950): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_AVC msg=audit(1463458067.754:9016951): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_ACCT msg=audit(1463458501.966:9016952): pid=14663 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463458501.966:9016953): pid=14663 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463458501.966:9016954): pid=14663 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3044 res=1
type=USER_START msg=audit(1463458501.970:9016955): pid=14663 uid=0 auid=0 ses=3044 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463458501.970:9016956): pid=14663 uid=0 auid=0 ses=3044 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463458501.974:9016957): pid=14663 uid=0 auid=0 ses=3044 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463458621.978:9016958): pid=14802 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463458621.978:9016959): pid=14802 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463458621.978:9016960): pid=14802 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3045 res=1
type=USER_START msg=audit(1463458621.978:9016961): pid=14802 uid=0 auid=0 ses=3045 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463458621.982:9016962): pid=14802 uid=0 auid=0 ses=3045 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463458621.982:9016963): pid=14802 uid=0 auid=0 ses=3045 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463459101.987:9016964): pid=15360 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463459101.987:9016965): pid=15360 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463459101.987:9016966): pid=15360 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3046 res=1
type=USER_START msg=audit(1463459101.987:9016967): pid=15360 uid=0 auid=0 ses=3046 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463459101.991:9016968): pid=15360 uid=0 auid=0 ses=3046 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463459101.991:9016969): pid=15360 uid=0 auid=0 ses=3046 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463459701.999:9016970): pid=16077 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463459701.999:9016971): pid=16077 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463459701.999:9016972): pid=16077 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3047 res=1
type=USER_START msg=audit(1463459701.999:9016973): pid=16077 uid=0 auid=0 ses=3047 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463459702.003:9016974): pid=16077 uid=0 auid=0 ses=3047 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463459702.003:9016975): pid=16077 uid=0 auid=0 ses=3047 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1463459861.231:9016976): pid=17607 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_ACCT msg=audit(1463459861.231:9016977): pid=17607 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_CMD msg=audit(1463459861.231:9016978): pid=17607 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/tmp/im" cmd=6170742D676574202D7520646973742D75706772616465 terminal=pts/24 res=success'
type=CRED_REFR msg=audit(1463459861.231:9016979): pid=17607 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_START msg=audit(1463459861.231:9016980): pid=17607 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_END msg=audit(1463459861.855:9016981): pid=17607 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=CRED_DISP msg=audit(1463459861.855:9016982): pid=17607 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_ACCT msg=audit(1463460301.012:9016983): pid=18116 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463460301.012:9016984): pid=18116 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463460301.012:9016985): pid=18116 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3048 res=1
type=USER_START msg=audit(1463460301.012:9016986): pid=18116 uid=0 auid=0 ses=3048 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463460301.016:9016987): pid=18116 uid=0 auid=0 ses=3048 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463460301.016:9016988): pid=18116 uid=0 auid=0 ses=3048 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463460901.024:9016989): pid=18820 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463460901.024:9016990): pid=18820 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463460901.024:9016991): pid=18820 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3049 res=1
type=USER_START msg=audit(1463460901.024:9016992): pid=18820 uid=0 auid=0 ses=3049 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463460901.028:9016993): pid=18820 uid=0 auid=0 ses=3049 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463460901.028:9016994): pid=18820 uid=0 auid=0 ses=3049 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463461501.036:9016995): pid=19516 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463461501.036:9016996): pid=19516 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463461501.036:9016997): pid=19516 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3050 res=1
type=USER_START msg=audit(1463461501.036:9016998): pid=19516 uid=0 auid=0 ses=3050 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463461501.040:9016999): pid=19516 uid=0 auid=0 ses=3050 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463461501.040:9017000): pid=19516 uid=0 auid=0 ses=3050 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463462101.048:9017001): pid=20217 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463462101.048:9017002): pid=20217 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463462101.048:9017003): pid=20217 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3051 res=1
type=USER_START msg=audit(1463462101.048:9017004): pid=20217 uid=0 auid=0 ses=3051 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463462101.052:9017005): pid=20217 uid=0 auid=0 ses=3051 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463462101.052:9017006): pid=20217 uid=0 auid=0 ses=3051 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463462221.056:9017007): pid=20358 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463462221.056:9017008): pid=20358 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463462221.056:9017009): pid=20358 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3052 res=1
type=USER_START msg=audit(1463462221.060:9017010): pid=20358 uid=0 auid=0 ses=3052 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463462221.060:9017011): pid=20358 uid=0 auid=0 ses=3052 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463462221.064:9017012): pid=20358 uid=0 auid=0 ses=3052 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463462701.068:9017013): pid=20922 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463462701.068:9017014): pid=20922 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463462701.068:9017015): pid=20922 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3053 res=1
type=USER_START msg=audit(1463462701.072:9017016): pid=20922 uid=0 auid=0 ses=3053 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463462701.072:9017017): pid=20922 uid=0 auid=0 ses=3053 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463462701.072:9017018): pid=20922 uid=0 auid=0 ses=3053 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463463301.081:9017019): pid=21617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463463301.081:9017020): pid=21617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463463301.081:9017021): pid=21617 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3054 res=1
type=USER_START msg=audit(1463463301.085:9017022): pid=21617 uid=0 auid=0 ses=3054 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463463301.085:9017023): pid=21617 uid=0 auid=0 ses=3054 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463463301.085:9017024): pid=21617 uid=0 auid=0 ses=3054 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463463901.093:9017025): pid=22328 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463463901.093:9017026): pid=22328 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463463901.093:9017027): pid=22328 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3055 res=1
type=USER_START msg=audit(1463463901.093:9017028): pid=22328 uid=0 auid=0 ses=3055 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463463901.097:9017029): pid=22328 uid=0 auid=0 ses=3055 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463463901.097:9017030): pid=22328 uid=0 auid=0 ses=3055 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463464501.105:9017031): pid=23025 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463464501.105:9017032): pid=23025 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463464501.105:9017033): pid=23025 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3056 res=1
type=USER_START msg=audit(1463464501.105:9017034): pid=23025 uid=0 auid=0 ses=3056 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463464501.109:9017035): pid=23025 uid=0 auid=0 ses=3056 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463464501.109:9017036): pid=23025 uid=0 auid=0 ses=3056 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463465101.117:9017037): pid=23758 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463465101.117:9017038): pid=23758 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463465101.117:9017039): pid=23758 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3057 res=1
type=USER_START msg=audit(1463465101.117:9017040): pid=23758 uid=0 auid=0 ses=3057 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463465101.121:9017041): pid=23758 uid=0 auid=0 ses=3057 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463465101.121:9017042): pid=23758 uid=0 auid=0 ses=3057 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463465701.129:9017043): pid=24455 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463465701.129:9017044): pid=24455 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463465701.129:9017045): pid=24455 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3058 res=1
type=USER_START msg=audit(1463465701.129:9017046): pid=24455 uid=0 auid=0 ses=3058 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463465701.133:9017047): pid=24455 uid=0 auid=0 ses=3058 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463465701.133:9017048): pid=24455 uid=0 auid=0 ses=3058 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463465821.137:9017049): pid=24608 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463465821.141:9017050): pid=24608 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463465821.141:9017051): pid=24608 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3059 res=1
type=USER_START msg=audit(1463465821.141:9017052): pid=24608 uid=0 auid=0 ses=3059 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463465821.145:9017053): pid=24608 uid=0 auid=0 ses=3059 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463465821.145:9017054): pid=24608 uid=0 auid=0 ses=3059 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463466301.150:9017055): pid=25176 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463466301.150:9017056): pid=25176 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463466301.150:9017057): pid=25176 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3060 res=1
type=USER_START msg=audit(1463466301.154:9017058): pid=25176 uid=0 auid=0 ses=3060 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463466301.158:9017059): pid=25176 uid=0 auid=0 ses=3060 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463466301.158:9017060): pid=25176 uid=0 auid=0 ses=3060 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1463466790.830:9017061): pid=25765 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_ACCT msg=audit(1463466790.830:9017062): pid=25765 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_CMD msg=audit(1463466790.830:9017063): pid=25765 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/tmp/im" cmd=6E657473746174202D616E70 terminal=pts/24 res=success'
type=CRED_REFR msg=audit(1463466790.830:9017064): pid=25765 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_START msg=audit(1463466790.830:9017065): pid=25765 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_END msg=audit(1463466790.854:9017066): pid=25765 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=CRED_DISP msg=audit(1463466790.854:9017067): pid=25765 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_ACCT msg=audit(1463466901.158:9017068): pid=25904 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463466901.158:9017069): pid=25904 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463466901.158:9017070): pid=25904 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3061 res=1
type=USER_START msg=audit(1463466901.162:9017071): pid=25904 uid=0 auid=0 ses=3061 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463466901.166:9017072): pid=25904 uid=0 auid=0 ses=3061 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463466901.166:9017073): pid=25904 uid=0 auid=0 ses=3061 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463467501.170:9017074): pid=26627 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463467501.170:9017075): pid=26627 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463467501.170:9017076): pid=26627 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3062 res=1
type=USER_START msg=audit(1463467501.174:9017077): pid=26627 uid=0 auid=0 ses=3062 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463467501.174:9017078): pid=26627 uid=0 auid=0 ses=3062 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463467501.174:9017079): pid=26627 uid=0 auid=0 ses=3062 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463468101.178:9017080): pid=27343 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463468101.178:9017081): pid=27343 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463468101.178:9017082): pid=27343 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3063 res=1
type=USER_START msg=audit(1463468101.182:9017083): pid=27343 uid=0 auid=0 ses=3063 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463468101.182:9017084): pid=27343 uid=0 auid=0 ses=3063 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463468101.182:9017085): pid=27343 uid=0 auid=0 ses=3063 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463468341.186:9017086): pid=27631 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463468341.186:9017087): pid=27631 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463468341.186:9017088): pid=27631 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3064 res=1
type=USER_START msg=audit(1463468341.186:9017089): pid=27631 uid=0 auid=0 ses=3064 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463468341.190:9017090): pid=27631 uid=0 auid=0 ses=3064 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463468341.190:9017091): pid=27631 uid=0 auid=0 ses=3064 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463468401.194:9017092): pid=27719 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463468401.198:9017093): pid=27719 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463468401.198:9017094): pid=27719 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3065 res=1
type=USER_START msg=audit(1463468401.198:9017095): pid=27719 uid=0 auid=0 ses=3065 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463468541.286:9017096): pid=27719 uid=0 auid=0 ses=3065 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463468541.286:9017097): pid=27719 uid=0 auid=0 ses=3065 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463468701.291:9017098): pid=28097 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463468701.291:9017099): pid=28097 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463468701.291:9017100): pid=28097 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3066 res=1
type=USER_START msg=audit(1463468701.295:9017101): pid=28097 uid=0 auid=0 ses=3066 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463468701.295:9017102): pid=28097 uid=0 auid=0 ses=3066 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463468701.295:9017103): pid=28097 uid=0 auid=0 ses=3066 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463469301.303:9017104): pid=28908 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463469301.303:9017105): pid=28908 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463469301.303:9017106): pid=28908 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3067 res=1
type=USER_START msg=audit(1463469301.303:9017107): pid=28908 uid=0 auid=0 ses=3067 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463469301.307:9017108): pid=28908 uid=0 auid=0 ses=3067 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463469301.307:9017109): pid=28908 uid=0 auid=0 ses=3067 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463469421.315:9017110): pid=29052 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463469421.315:9017111): pid=29052 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463469421.315:9017112): pid=29052 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3068 res=1
type=USER_START msg=audit(1463469421.315:9017113): pid=29052 uid=0 auid=0 ses=3068 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463469421.319:9017114): pid=29052 uid=0 auid=0 ses=3068 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463469421.319:9017115): pid=29052 uid=0 auid=0 ses=3068 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AVC msg=audit(1463469494.403:9017116): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_ACCT msg=audit(1463469901.323:9017117): pid=29653 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463469901.323:9017118): pid=29653 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463469901.323:9017119): pid=29653 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3069 res=1
type=USER_START msg=audit(1463469901.323:9017120): pid=29653 uid=0 auid=0 ses=3069 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463469901.327:9017121): pid=29653 uid=0 auid=0 ses=3069 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463469901.327:9017122): pid=29653 uid=0 auid=0 ses=3069 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463470501.335:9017123): pid=30482 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463470501.335:9017124): pid=30482 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463470501.335:9017125): pid=30482 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3070 res=1
type=USER_START msg=audit(1463470501.339:9017126): pid=30482 uid=0 auid=0 ses=3070 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463470501.339:9017127): pid=30482 uid=0 auid=0 ses=3070 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463470501.343:9017128): pid=30482 uid=0 auid=0 ses=3070 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463470920.288:9017129): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=cups comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463471101.348:9017130): pid=31298 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463471101.348:9017131): pid=31298 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463471101.348:9017132): pid=31298 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3071 res=1
type=USER_START msg=audit(1463471101.352:9017133): pid=31298 uid=0 auid=0 ses=3071 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463471101.352:9017134): pid=31298 uid=0 auid=0 ses=3071 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463471101.356:9017135): pid=31298 uid=0 auid=0 ses=3071 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_STOP msg=audit(1463471300.024:9017136): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=cups comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463471701.360:9017137): pid=32135 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463471701.360:9017138): pid=32135 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463471701.360:9017139): pid=32135 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3072 res=1
type=USER_START msg=audit(1463471701.364:9017140): pid=32135 uid=0 auid=0 ses=3072 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463471701.368:9017141): pid=32135 uid=0 auid=0 ses=3072 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463471701.368:9017142): pid=32135 uid=0 auid=0 ses=3072 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463472301.371:9017143): pid=413 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463472301.371:9017144): pid=413 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463472301.375:9017145): pid=413 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3073 res=1
type=USER_START msg=audit(1463472301.375:9017146): pid=413 uid=0 auid=0 ses=3073 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463472301.379:9017147): pid=413 uid=0 auid=0 ses=3073 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463472301.379:9017148): pid=413 uid=0 auid=0 ses=3073 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463472901.384:9017149): pid=1114 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463472901.384:9017150): pid=1114 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463472901.388:9017151): pid=1114 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3074 res=1
type=USER_START msg=audit(1463472901.388:9017152): pid=1114 uid=0 auid=0 ses=3074 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463472901.392:9017153): pid=1114 uid=0 auid=0 ses=3074 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463472901.392:9017154): pid=1114 uid=0 auid=0 ses=3074 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463473021.396:9017155): pid=1294 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463473021.396:9017156): pid=1294 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463473021.396:9017157): pid=1294 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3075 res=1
type=USER_START msg=audit(1463473021.396:9017158): pid=1294 uid=0 auid=0 ses=3075 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463473021.400:9017159): pid=1294 uid=0 auid=0 ses=3075 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463473021.400:9017160): pid=1294 uid=0 auid=0 ses=3075 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463473479.044:9017161): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463473479.044:9017162): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463473501.408:9017163): pid=1853 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463473501.408:9017164): pid=1853 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463473501.408:9017165): pid=1853 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3076 res=1
type=USER_START msg=audit(1463473501.408:9017166): pid=1853 uid=0 auid=0 ses=3076 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463473501.412:9017167): pid=1853 uid=0 auid=0 ses=3076 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463473501.412:9017168): pid=1853 uid=0 auid=0 ses=3076 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463474101.420:9017169): pid=2577 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463474101.420:9017170): pid=2577 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463474101.420:9017171): pid=2577 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3077 res=1
type=USER_START msg=audit(1463474101.420:9017172): pid=2577 uid=0 auid=0 ses=3077 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463474101.424:9017173): pid=2577 uid=0 auid=0 ses=3077 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463474101.424:9017174): pid=2577 uid=0 auid=0 ses=3077 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463474701.432:9017175): pid=3454 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463474701.432:9017176): pid=3454 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463474701.432:9017177): pid=3454 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3078 res=1
type=USER_START msg=audit(1463474701.432:9017178): pid=3454 uid=0 auid=0 ses=3078 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463474701.436:9017179): pid=3454 uid=0 auid=0 ses=3078 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463474701.436:9017180): pid=3454 uid=0 auid=0 ses=3078 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463475301.444:9017181): pid=4380 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463475301.444:9017182): pid=4380 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463475301.444:9017183): pid=4380 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3079 res=1
type=USER_START msg=audit(1463475301.444:9017184): pid=4380 uid=0 auid=0 ses=3079 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463475301.448:9017185): pid=4380 uid=0 auid=0 ses=3079 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463475301.448:9017186): pid=4380 uid=0 auid=0 ses=3079 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463475901.456:9017187): pid=5104 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463475901.456:9017188): pid=5104 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463475901.456:9017189): pid=5104 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3080 res=1
type=USER_START msg=audit(1463475901.456:9017190): pid=5104 uid=0 auid=0 ses=3080 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463475901.460:9017191): pid=5104 uid=0 auid=0 ses=3080 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463475901.460:9017192): pid=5104 uid=0 auid=0 ses=3080 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463476501.468:9017193): pid=5826 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463476501.468:9017194): pid=5826 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463476501.468:9017195): pid=5826 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3081 res=1
type=USER_START msg=audit(1463476501.468:9017196): pid=5826 uid=0 auid=0 ses=3081 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463476501.472:9017197): pid=5826 uid=0 auid=0 ses=3081 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463476501.472:9017198): pid=5826 uid=0 auid=0 ses=3081 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463476621.476:9017199): pid=5964 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463476621.476:9017200): pid=5964 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463476621.480:9017201): pid=5964 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3082 res=1
type=USER_START msg=audit(1463476621.480:9017202): pid=5964 uid=0 auid=0 ses=3082 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463476621.484:9017203): pid=5964 uid=0 auid=0 ses=3082 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463476621.484:9017204): pid=5964 uid=0 auid=0 ses=3082 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463477101.487:9017205): pid=6512 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463477101.487:9017206): pid=6512 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463477101.487:9017207): pid=6512 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3083 res=1
type=USER_START msg=audit(1463477101.491:9017208): pid=6512 uid=0 auid=0 ses=3083 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463477101.491:9017209): pid=6512 uid=0 auid=0 ses=3083 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463477101.491:9017210): pid=6512 uid=0 auid=0 ses=3083 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463477701.499:9017211): pid=7211 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463477701.499:9017212): pid=7211 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463477701.499:9017213): pid=7211 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3084 res=1
type=USER_START msg=audit(1463477701.503:9017214): pid=7211 uid=0 auid=0 ses=3084 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463477701.503:9017215): pid=7211 uid=0 auid=0 ses=3084 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463477701.507:9017216): pid=7211 uid=0 auid=0 ses=3084 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463478301.511:9017217): pid=7897 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463478301.511:9017218): pid=7897 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463478301.511:9017219): pid=7897 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3085 res=1
type=USER_START msg=audit(1463478301.515:9017220): pid=7897 uid=0 auid=0 ses=3085 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463478301.515:9017221): pid=7897 uid=0 auid=0 ses=3085 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463478301.519:9017222): pid=7897 uid=0 auid=0 ses=3085 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463478901.523:9017223): pid=8588 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463478901.523:9017224): pid=8588 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463478901.523:9017225): pid=8588 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3086 res=1
type=USER_START msg=audit(1463478901.527:9017226): pid=8588 uid=0 auid=0 ses=3086 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463478901.527:9017227): pid=8588 uid=0 auid=0 ses=3086 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463478901.531:9017228): pid=8588 uid=0 auid=0 ses=3086 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463479501.535:9017229): pid=9276 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463479501.535:9017230): pid=9276 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463479501.535:9017231): pid=9276 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3087 res=1
type=USER_START msg=audit(1463479501.539:9017232): pid=9276 uid=0 auid=0 ses=3087 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463479501.543:9017233): pid=9276 uid=0 auid=0 ses=3087 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463479501.543:9017234): pid=9276 uid=0 auid=0 ses=3087 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463480101.547:9017235): pid=9975 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463480101.547:9017236): pid=9975 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463480101.547:9017237): pid=9975 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3088 res=1
type=USER_START msg=audit(1463480101.551:9017238): pid=9975 uid=0 auid=0 ses=3088 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463480101.555:9017239): pid=9975 uid=0 auid=0 ses=3088 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463480101.555:9017240): pid=9975 uid=0 auid=0 ses=3088 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463480221.559:9017241): pid=10118 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463480221.559:9017242): pid=10118 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463480221.559:9017243): pid=10118 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3089 res=1
type=USER_START msg=audit(1463480221.559:9017244): pid=10118 uid=0 auid=0 ses=3089 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463480221.563:9017245): pid=10118 uid=0 auid=0 ses=3089 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463480221.563:9017246): pid=10118 uid=0 auid=0 ses=3089 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463480701.571:9017247): pid=10678 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463480701.571:9017248): pid=10678 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463480701.571:9017249): pid=10678 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3090 res=1
type=USER_START msg=audit(1463480701.571:9017250): pid=10678 uid=0 auid=0 ses=3090 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463480701.575:9017251): pid=10678 uid=0 auid=0 ses=3090 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463480701.575:9017252): pid=10678 uid=0 auid=0 ses=3090 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463481035.887:9017253): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463481046.163:9017254): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463481301.583:9017255): pid=11373 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463481301.583:9017256): pid=11373 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463481301.583:9017257): pid=11373 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3091 res=1
type=USER_START msg=audit(1463481301.583:9017258): pid=11373 uid=0 auid=0 ses=3091 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463481301.587:9017259): pid=11373 uid=0 auid=0 ses=3091 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463481301.587:9017260): pid=11373 uid=0 auid=0 ses=3091 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463481901.595:9017261): pid=12057 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463481901.595:9017262): pid=12057 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463481901.595:9017263): pid=12057 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3092 res=1
type=USER_START msg=audit(1463481901.595:9017264): pid=12057 uid=0 auid=0 ses=3092 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463481901.599:9017265): pid=12057 uid=0 auid=0 ses=3092 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463481901.599:9017266): pid=12057 uid=0 auid=0 ses=3092 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463482501.607:9017267): pid=12743 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463482501.607:9017268): pid=12743 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463482501.607:9017269): pid=12743 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3093 res=1
type=USER_START msg=audit(1463482501.607:9017270): pid=12743 uid=0 auid=0 ses=3093 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463482501.611:9017271): pid=12743 uid=0 auid=0 ses=3093 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463482501.611:9017272): pid=12743 uid=0 auid=0 ses=3093 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463482801.619:9017273): pid=13102 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463482801.619:9017274): pid=13102 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463482801.619:9017275): pid=13102 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3094 res=1
type=USER_START msg=audit(1463482801.619:9017276): pid=13102 uid=0 auid=0 ses=3094 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463482942.123:9017277): pid=13102 uid=0 auid=0 ses=3094 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463482942.123:9017278): pid=13102 uid=0 auid=0 ses=3094 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463483101.131:9017279): pid=13452 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463483101.131:9017280): pid=13452 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463483101.131:9017281): pid=13452 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3095 res=1
type=USER_START msg=audit(1463483101.131:9017282): pid=13452 uid=0 auid=0 ses=3095 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463483101.135:9017283): pid=13452 uid=0 auid=0 ses=3095 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463483101.135:9017284): pid=13452 uid=0 auid=0 ses=3095 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463483701.138:9017285): pid=14139 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463483701.142:9017286): pid=14139 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463483701.142:9017287): pid=14139 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3096 res=1
type=USER_START msg=audit(1463483701.142:9017288): pid=14139 uid=0 auid=0 ses=3096 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463483701.146:9017289): pid=14139 uid=0 auid=0 ses=3096 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463483701.146:9017290): pid=14139 uid=0 auid=0 ses=3096 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463483821.150:9017291): pid=14282 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463483821.150:9017292): pid=14282 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463483821.150:9017293): pid=14282 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3097 res=1
type=USER_START msg=audit(1463483821.150:9017294): pid=14282 uid=0 auid=0 ses=3097 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463483821.154:9017295): pid=14282 uid=0 auid=0 ses=3097 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463483821.154:9017296): pid=14282 uid=0 auid=0 ses=3097 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463484301.162:9017297): pid=14835 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463484301.162:9017298): pid=14835 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463484301.162:9017299): pid=14835 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3098 res=1
type=USER_START msg=audit(1463484301.162:9017300): pid=14835 uid=0 auid=0 ses=3098 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463484301.166:9017301): pid=14835 uid=0 auid=0 ses=3098 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463484301.166:9017302): pid=14835 uid=0 auid=0 ses=3098 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463484901.174:9017303): pid=15539 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463484901.174:9017304): pid=15539 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463484901.174:9017305): pid=15539 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3099 res=1
type=USER_START msg=audit(1463484901.174:9017306): pid=15539 uid=0 auid=0 ses=3099 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463484901.178:9017307): pid=15539 uid=0 auid=0 ses=3099 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463484901.178:9017308): pid=15539 uid=0 auid=0 ses=3099 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463485501.186:9017309): pid=16225 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463485501.186:9017310): pid=16225 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463485501.186:9017311): pid=16225 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3100 res=1
type=USER_START msg=audit(1463485501.186:9017312): pid=16225 uid=0 auid=0 ses=3100 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463485501.190:9017313): pid=16225 uid=0 auid=0 ses=3100 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463485501.190:9017314): pid=16225 uid=0 auid=0 ses=3100 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463486101.202:9017315): pid=16970 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463486101.202:9017316): pid=16970 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463486101.202:9017317): pid=16970 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3101 res=1
type=USER_START msg=audit(1463486101.202:9017318): pid=16970 uid=0 auid=0 ses=3101 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463486101.206:9017319): pid=16970 uid=0 auid=0 ses=3101 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463486101.206:9017320): pid=16970 uid=0 auid=0 ses=3101 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463486701.210:9017321): pid=17663 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463486701.210:9017322): pid=17663 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463486701.210:9017323): pid=17663 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3102 res=1
type=USER_START msg=audit(1463486701.210:9017324): pid=17663 uid=0 auid=0 ses=3102 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463486701.214:9017325): pid=17663 uid=0 auid=0 ses=3102 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463486701.214:9017326): pid=17663 uid=0 auid=0 ses=3102 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463487301.222:9017327): pid=18359 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463487301.222:9017328): pid=18359 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463487301.222:9017329): pid=18359 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3103 res=1
type=USER_START msg=audit(1463487301.222:9017330): pid=18359 uid=0 auid=0 ses=3103 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463487301.226:9017331): pid=18359 uid=0 auid=0 ses=3103 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463487301.226:9017332): pid=18359 uid=0 auid=0 ses=3103 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463487421.230:9017333): pid=18497 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463487421.234:9017334): pid=18497 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463487421.234:9017335): pid=18497 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3104 res=1
type=USER_START msg=audit(1463487421.234:9017336): pid=18497 uid=0 auid=0 ses=3104 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463487421.238:9017337): pid=18497 uid=0 auid=0 ses=3104 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463487421.238:9017338): pid=18497 uid=0 auid=0 ses=3104 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463487901.242:9017339): pid=19046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463487901.242:9017340): pid=19046 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463487901.242:9017341): pid=19046 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3105 res=1
type=USER_START msg=audit(1463487901.246:9017342): pid=19046 uid=0 auid=0 ses=3105 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463487901.250:9017343): pid=19046 uid=0 auid=0 ses=3105 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463487901.250:9017344): pid=19046 uid=0 auid=0 ses=3105 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463488501.254:9017345): pid=19754 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463488501.254:9017346): pid=19754 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463488501.254:9017347): pid=19754 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3106 res=1
type=USER_START msg=audit(1463488501.258:9017348): pid=19754 uid=0 auid=0 ses=3106 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463488501.258:9017349): pid=19754 uid=0 auid=0 ses=3106 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463488501.262:9017350): pid=19754 uid=0 auid=0 ses=3106 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463489101.266:9017351): pid=20447 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463489101.266:9017352): pid=20447 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463489101.266:9017353): pid=20447 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3107 res=1
type=USER_START msg=audit(1463489101.270:9017354): pid=20447 uid=0 auid=0 ses=3107 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463489101.270:9017355): pid=20447 uid=0 auid=0 ses=3107 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463489101.270:9017356): pid=20447 uid=0 auid=0 ses=3107 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463489701.278:9017357): pid=21133 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463489701.278:9017358): pid=21133 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463489701.278:9017359): pid=21133 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3108 res=1
type=USER_START msg=audit(1463489701.282:9017360): pid=21133 uid=0 auid=0 ses=3108 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463489701.282:9017361): pid=21133 uid=0 auid=0 ses=3108 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463489701.282:9017362): pid=21133 uid=0 auid=0 ses=3108 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1463490200.250:9017363): pid=23705 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463490301.290:9017364): pid=23849 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463490301.290:9017365): pid=23849 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463490301.290:9017366): pid=23849 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3109 res=1
type=USER_START msg=audit(1463490301.294:9017367): pid=23849 uid=0 auid=0 ses=3109 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463490301.298:9017368): pid=23849 uid=0 auid=0 ses=3109 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463490301.298:9017369): pid=23849 uid=0 auid=0 ses=3109 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463490901.302:9017370): pid=24534 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463490901.302:9017371): pid=24534 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463490901.302:9017372): pid=24534 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3110 res=1
type=USER_START msg=audit(1463490901.306:9017373): pid=24534 uid=0 auid=0 ses=3110 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463490901.306:9017374): pid=24534 uid=0 auid=0 ses=3110 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463490901.310:9017375): pid=24534 uid=0 auid=0 ses=3110 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463491021.314:9017376): pid=24672 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463491021.314:9017377): pid=24672 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463491021.314:9017378): pid=24672 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3111 res=1
type=USER_START msg=audit(1463491021.314:9017379): pid=24672 uid=0 auid=0 ses=3111 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463491021.318:9017380): pid=24672 uid=0 auid=0 ses=3111 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463491021.318:9017381): pid=24672 uid=0 auid=0 ses=3111 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463491501.330:9017382): pid=25233 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463491501.330:9017383): pid=25233 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463491501.330:9017384): pid=25233 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3112 res=1
type=USER_START msg=audit(1463491501.330:9017385): pid=25233 uid=0 auid=0 ses=3112 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463491501.334:9017386): pid=25234 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463491501.334:9017387): pid=25234 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463491501.334:9017388): pid=25234 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3113 res=1
type=CRED_DISP msg=audit(1463491501.334:9017389): pid=25233 uid=0 auid=0 ses=3112 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463491501.334:9017390): pid=25233 uid=0 auid=0 ses=3112 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1463491501.334:9017391): pid=25234 uid=0 auid=0 ses=3113 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463491501.338:9017392): pid=25234 uid=0 auid=0 ses=3113 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463491501.338:9017393): pid=25234 uid=0 auid=0 ses=3113 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463492101.345:9017394): pid=25920 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463492101.345:9017395): pid=25920 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463492101.345:9017396): pid=25920 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3114 res=1
type=USER_START msg=audit(1463492101.345:9017397): pid=25920 uid=0 auid=0 ses=3114 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463492101.349:9017398): pid=25920 uid=0 auid=0 ses=3114 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463492101.349:9017399): pid=25920 uid=0 auid=0 ses=3114 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463492701.357:9017400): pid=26634 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463492701.357:9017401): pid=26634 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463492701.357:9017402): pid=26634 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3115 res=1
type=USER_START msg=audit(1463492701.357:9017403): pid=26634 uid=0 auid=0 ses=3115 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463492701.361:9017404): pid=26634 uid=0 auid=0 ses=3115 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463492701.361:9017405): pid=26634 uid=0 auid=0 ses=3115 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463493301.365:9017406): pid=27337 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463493301.369:9017407): pid=27337 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463493301.369:9017408): pid=27337 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3116 res=1
type=USER_START msg=audit(1463493301.369:9017409): pid=27337 uid=0 auid=0 ses=3116 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463493301.373:9017410): pid=27337 uid=0 auid=0 ses=3116 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463493301.373:9017411): pid=27337 uid=0 auid=0 ses=3116 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463493901.377:9017412): pid=28032 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463493901.381:9017413): pid=28032 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463493901.381:9017414): pid=28032 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3117 res=1
type=USER_START msg=audit(1463493901.381:9017415): pid=28032 uid=0 auid=0 ses=3117 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463493901.385:9017416): pid=28032 uid=0 auid=0 ses=3117 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463493901.385:9017417): pid=28032 uid=0 auid=0 ses=3117 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463494501.393:9017418): pid=28731 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463494501.393:9017419): pid=28731 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463494501.393:9017420): pid=28731 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3118 res=1
type=USER_START msg=audit(1463494501.393:9017421): pid=28731 uid=0 auid=0 ses=3118 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463494501.397:9017422): pid=28731 uid=0 auid=0 ses=3118 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463494501.397:9017423): pid=28731 uid=0 auid=0 ses=3118 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463494621.401:9017424): pid=28872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463494621.401:9017425): pid=28872 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463494621.401:9017426): pid=28872 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3119 res=1
type=USER_START msg=audit(1463494621.405:9017427): pid=28872 uid=0 auid=0 ses=3119 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463494621.409:9017428): pid=28872 uid=0 auid=0 ses=3119 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463494621.409:9017429): pid=28872 uid=0 auid=0 ses=3119 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463495101.417:9017430): pid=29417 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463495101.417:9017431): pid=29417 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463495101.417:9017432): pid=29417 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3120 res=1
type=USER_START msg=audit(1463495101.417:9017433): pid=29417 uid=0 auid=0 ses=3120 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463495101.421:9017434): pid=29417 uid=0 auid=0 ses=3120 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463495101.421:9017435): pid=29417 uid=0 auid=0 ses=3120 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463495401.424:9017436): pid=29771 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463495401.424:9017437): pid=29771 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463495401.428:9017438): pid=29771 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3121 res=1
type=USER_START msg=audit(1463495401.428:9017439): pid=29771 uid=0 auid=0 ses=3121 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463495401.492:9017440): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=anacron comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1463495401.496:9017441): pid=29771 uid=0 auid=0 ses=3121 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463495401.496:9017442): pid=29771 uid=0 auid=0 ses=3121 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463495701.500:9017443): pid=30139 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463495701.504:9017444): pid=30139 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463495701.504:9017445): pid=30139 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3122 res=1
type=USER_START msg=audit(1463495701.504:9017446): pid=30139 uid=0 auid=0 ses=3122 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463495701.508:9017447): pid=30139 uid=0 auid=0 ses=3122 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463495701.508:9017448): pid=30139 uid=0 auid=0 ses=3122 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463495702.364:9017449): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=acct comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463495702.364:9017450): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=acct comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1463495702.392:9017451): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=acct comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1463495707.212:9017452): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=cups comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463495798.352:9017453): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=cups comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463495934.836:9017454): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=anacron comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463496301.516:9017455): pid=31413 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463496301.516:9017456): pid=31413 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463496301.516:9017457): pid=31413 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3123 res=1
type=USER_START msg=audit(1463496301.516:9017458): pid=31413 uid=0 auid=0 ses=3123 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463496301.520:9017459): pid=31413 uid=0 auid=0 ses=3123 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463496301.520:9017460): pid=31413 uid=0 auid=0 ses=3123 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463496901.528:9017461): pid=32108 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463496901.528:9017462): pid=32108 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463496901.528:9017463): pid=32108 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3124 res=1
type=USER_START msg=audit(1463496901.528:9017464): pid=32108 uid=0 auid=0 ses=3124 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463496901.532:9017465): pid=32108 uid=0 auid=0 ses=3124 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463496901.532:9017466): pid=32108 uid=0 auid=0 ses=3124 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463497201.535:9017467): pid=32455 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463497201.535:9017468): pid=32455 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463497201.535:9017469): pid=32455 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3125 res=1
type=USER_START msg=audit(1463497201.539:9017470): pid=32455 uid=0 auid=0 ses=3125 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463497326.179:9017471): pid=32455 uid=0 auid=0 ses=3125 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463497326.179:9017472): pid=32455 uid=0 auid=0 ses=3125 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463497501.183:9017473): pid=346 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463497501.183:9017474): pid=346 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463497501.183:9017475): pid=346 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3126 res=1
type=USER_START msg=audit(1463497501.183:9017476): pid=346 uid=0 auid=0 ses=3126 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463497501.187:9017477): pid=346 uid=0 auid=0 ses=3126 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463497501.187:9017478): pid=346 uid=0 auid=0 ses=3126 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463498101.195:9017479): pid=1053 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463498101.195:9017480): pid=1053 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463498101.195:9017481): pid=1053 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3127 res=1
type=USER_START msg=audit(1463498101.195:9017482): pid=1053 uid=0 auid=0 ses=3127 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463498101.199:9017483): pid=1053 uid=0 auid=0 ses=3127 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463498101.199:9017484): pid=1053 uid=0 auid=0 ses=3127 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463498221.207:9017485): pid=1226 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463498221.207:9017486): pid=1226 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463498221.207:9017487): pid=1226 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3128 res=1
type=USER_START msg=audit(1463498221.207:9017488): pid=1226 uid=0 auid=0 ses=3128 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463498221.211:9017489): pid=1226 uid=0 auid=0 ses=3128 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463498221.211:9017490): pid=1226 uid=0 auid=0 ses=3128 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463498701.219:9017491): pid=1790 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463498701.219:9017492): pid=1790 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463498701.219:9017493): pid=1790 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3129 res=1
type=USER_START msg=audit(1463498701.219:9017494): pid=1790 uid=0 auid=0 ses=3129 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463498701.223:9017495): pid=1790 uid=0 auid=0 ses=3129 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463498701.223:9017496): pid=1790 uid=0 auid=0 ses=3129 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463499301.230:9017497): pid=2522 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463499301.230:9017498): pid=2522 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463499301.230:9017499): pid=2522 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3130 res=1
type=USER_START msg=audit(1463499301.230:9017500): pid=2522 uid=0 auid=0 ses=3130 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463499301.234:9017501): pid=2522 uid=0 auid=0 ses=3130 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463499301.234:9017502): pid=2522 uid=0 auid=0 ses=3130 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463499901.242:9017503): pid=3359 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463499901.242:9017504): pid=3359 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463499901.242:9017505): pid=3359 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3131 res=1
type=USER_START msg=audit(1463499901.242:9017506): pid=3359 uid=0 auid=0 ses=3131 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463499901.246:9017507): pid=3359 uid=0 auid=0 ses=3131 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463499901.246:9017508): pid=3359 uid=0 auid=0 ses=3131 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463500501.254:9017509): pid=4320 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463500501.254:9017510): pid=4320 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463500501.254:9017511): pid=4320 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3132 res=1
type=USER_START msg=audit(1463500501.254:9017512): pid=4320 uid=0 auid=0 ses=3132 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463500501.258:9017513): pid=4320 uid=0 auid=0 ses=3132 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463500501.258:9017514): pid=4320 uid=0 auid=0 ses=3132 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463501101.266:9017515): pid=5022 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463501101.266:9017516): pid=5022 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463501101.266:9017517): pid=5022 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3133 res=1
type=USER_START msg=audit(1463501101.266:9017518): pid=5022 uid=0 auid=0 ses=3133 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463501101.270:9017519): pid=5022 uid=0 auid=0 ses=3133 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463501101.270:9017520): pid=5022 uid=0 auid=0 ses=3133 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463501701.278:9017521): pid=5741 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463501701.278:9017522): pid=5741 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463501701.278:9017523): pid=5741 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3134 res=1
type=USER_START msg=audit(1463501701.278:9017524): pid=5741 uid=0 auid=0 ses=3134 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463501701.282:9017525): pid=5741 uid=0 auid=0 ses=3134 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463501701.282:9017526): pid=5741 uid=0 auid=0 ses=3134 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463501821.290:9017527): pid=5894 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463501821.290:9017528): pid=5894 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463501821.290:9017529): pid=5894 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3135 res=1
type=USER_START msg=audit(1463501821.290:9017530): pid=5894 uid=0 auid=0 ses=3135 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463501821.294:9017531): pid=5894 uid=0 auid=0 ses=3135 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463501821.294:9017532): pid=5894 uid=0 auid=0 ses=3135 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463502301.298:9017533): pid=6445 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463502301.302:9017534): pid=6445 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463502301.302:9017535): pid=6445 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3136 res=1
type=USER_START msg=audit(1463502301.302:9017536): pid=6445 uid=0 auid=0 ses=3136 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463502301.306:9017537): pid=6445 uid=0 auid=0 ses=3136 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463502301.306:9017538): pid=6445 uid=0 auid=0 ses=3136 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463502901.310:9017539): pid=7138 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463502901.310:9017540): pid=7138 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463502901.310:9017541): pid=7138 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3137 res=1
type=USER_START msg=audit(1463502901.314:9017542): pid=7138 uid=0 auid=0 ses=3137 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463502901.318:9017543): pid=7138 uid=0 auid=0 ses=3137 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463502901.318:9017544): pid=7138 uid=0 auid=0 ses=3137 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463503501.322:9017545): pid=7817 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463503501.322:9017546): pid=7817 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463503501.322:9017547): pid=7817 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3138 res=1
type=USER_START msg=audit(1463503501.326:9017548): pid=7817 uid=0 auid=0 ses=3138 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463503501.330:9017549): pid=7817 uid=0 auid=0 ses=3138 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463503501.330:9017550): pid=7817 uid=0 auid=0 ses=3138 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463504101.338:9017551): pid=8517 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463504101.338:9017552): pid=8517 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463504101.338:9017553): pid=8517 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3139 res=1
type=USER_START msg=audit(1463504101.338:9017554): pid=8517 uid=0 auid=0 ses=3139 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463504101.342:9017555): pid=8517 uid=0 auid=0 ses=3139 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463504101.342:9017556): pid=8517 uid=0 auid=0 ses=3139 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463504701.350:9017557): pid=9206 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463504701.350:9017558): pid=9206 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463504701.350:9017559): pid=9206 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3140 res=1
type=USER_START msg=audit(1463504701.350:9017560): pid=9206 uid=0 auid=0 ses=3140 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463504701.354:9017561): pid=9206 uid=0 auid=0 ses=3140 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463504701.354:9017562): pid=9206 uid=0 auid=0 ses=3140 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463505301.362:9017563): pid=9895 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463505301.362:9017564): pid=9895 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463505301.362:9017565): pid=9895 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3141 res=1
type=USER_START msg=audit(1463505301.362:9017566): pid=9895 uid=0 auid=0 ses=3141 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463505301.366:9017567): pid=9895 uid=0 auid=0 ses=3141 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463505301.366:9017568): pid=9895 uid=0 auid=0 ses=3141 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463505421.370:9017569): pid=10031 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463505421.370:9017570): pid=10031 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463505421.370:9017571): pid=10031 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3142 res=1
type=USER_START msg=audit(1463505421.374:9017572): pid=10031 uid=0 auid=0 ses=3142 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463505421.374:9017573): pid=10031 uid=0 auid=0 ses=3142 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463505421.374:9017574): pid=10031 uid=0 auid=0 ses=3142 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463505901.382:9017575): pid=10586 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463505901.382:9017576): pid=10586 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463505901.382:9017577): pid=10586 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3143 res=1
type=USER_START msg=audit(1463505901.382:9017578): pid=10586 uid=0 auid=0 ses=3143 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463505901.386:9017579): pid=10586 uid=0 auid=0 ses=3143 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463505901.386:9017580): pid=10586 uid=0 auid=0 ses=3143 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463506501.394:9017581): pid=11293 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463506501.394:9017582): pid=11293 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463506501.394:9017583): pid=11293 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3144 res=1
type=USER_START msg=audit(1463506501.394:9017584): pid=11293 uid=0 auid=0 ses=3144 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463506501.398:9017585): pid=11293 uid=0 auid=0 ses=3144 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463506501.398:9017586): pid=11293 uid=0 auid=0 ses=3144 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463507101.406:9017587): pid=11992 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463507101.406:9017588): pid=11992 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463507101.406:9017589): pid=11992 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3145 res=1
type=USER_START msg=audit(1463507101.406:9017590): pid=11992 uid=0 auid=0 ses=3145 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463507101.410:9017591): pid=11992 uid=0 auid=0 ses=3145 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463507101.410:9017592): pid=11992 uid=0 auid=0 ses=3145 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463507701.417:9017593): pid=12725 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463507701.417:9017594): pid=12725 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463507701.417:9017595): pid=12725 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3146 res=1
type=USER_START msg=audit(1463507701.421:9017596): pid=12725 uid=0 auid=0 ses=3146 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463507701.421:9017597): pid=12725 uid=0 auid=0 ses=3146 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463507701.421:9017598): pid=12725 uid=0 auid=0 ses=3146 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AVC msg=audit(1463507842.953:9017599): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_AVC msg=audit(1463507865.645:9017600): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_ACCT msg=audit(1463508301.429:9017601): pid=13461 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463508301.429:9017602): pid=13461 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463508301.429:9017603): pid=13461 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3147 res=1
type=USER_START msg=audit(1463508301.429:9017604): pid=13461 uid=0 auid=0 ses=3147 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463508301.433:9017605): pid=13461 uid=0 auid=0 ses=3147 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463508301.433:9017606): pid=13461 uid=0 auid=0 ses=3147 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AVC msg=audit(1463508385.581:9017607): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_ACCT msg=audit(1463508901.437:9017608): pid=14187 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463508901.437:9017609): pid=14187 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463508901.441:9017610): pid=14187 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3148 res=1
type=USER_START msg=audit(1463508901.441:9017611): pid=14187 uid=0 auid=0 ses=3148 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463508901.445:9017612): pid=14187 uid=0 auid=0 ses=3148 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463508901.445:9017613): pid=14187 uid=0 auid=0 ses=3148 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463509021.449:9017614): pid=14334 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463509021.449:9017615): pid=14334 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463509021.449:9017616): pid=14334 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3149 res=1
type=USER_START msg=audit(1463509021.449:9017617): pid=14334 uid=0 auid=0 ses=3149 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463509021.453:9017618): pid=14334 uid=0 auid=0 ses=3149 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463509021.453:9017619): pid=14334 uid=0 auid=0 ses=3149 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463509501.460:9017620): pid=14905 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463509501.460:9017621): pid=14905 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463509501.460:9017622): pid=14905 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3150 res=1
type=USER_START msg=audit(1463509501.460:9017623): pid=14905 uid=0 auid=0 ses=3150 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463509501.464:9017624): pid=14905 uid=0 auid=0 ses=3150 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463509501.464:9017625): pid=14905 uid=0 auid=0 ses=3150 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AVC msg=audit(1463509913.316:9017626): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_AVC msg=audit(1463510029.248:9017627): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_ACCT msg=audit(1463510101.472:9017628): pid=15638 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463510101.472:9017629): pid=15638 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463510101.472:9017630): pid=15638 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3151 res=1
type=USER_START msg=audit(1463510101.472:9017631): pid=15638 uid=0 auid=0 ses=3151 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463510101.476:9017632): pid=15638 uid=0 auid=0 ses=3151 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463510101.476:9017633): pid=15638 uid=0 auid=0 ses=3151 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463510701.480:9017634): pid=16369 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463510701.484:9017635): pid=16369 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463510701.484:9017636): pid=16369 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3152 res=1
type=USER_START msg=audit(1463510701.484:9017637): pid=16369 uid=0 auid=0 ses=3152 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463510701.484:9017638): pid=16369 uid=0 auid=0 ses=3152 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463510701.484:9017639): pid=16369 uid=0 auid=0 ses=3152 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AVC msg=audit(1463511151.128:9017640): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_ACCT msg=audit(1463511301.492:9017641): pid=17157 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463511301.492:9017642): pid=17157 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463511301.492:9017643): pid=17157 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3153 res=1
type=USER_START msg=audit(1463511301.492:9017644): pid=17157 uid=0 auid=0 ses=3153 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463511301.496:9017645): pid=17157 uid=0 auid=0 ses=3153 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463511301.496:9017646): pid=17157 uid=0 auid=0 ses=3153 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463511601.504:9017647): pid=17522 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463511601.504:9017648): pid=17522 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463511601.504:9017649): pid=17522 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3154 res=1
type=USER_START msg=audit(1463511601.504:9017650): pid=17522 uid=0 auid=0 ses=3154 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463511734.680:9017651): pid=17522 uid=0 auid=0 ses=3154 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463511734.680:9017652): pid=17522 uid=0 auid=0 ses=3154 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463511901.688:9017653): pid=17882 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463511901.688:9017654): pid=17882 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463511901.688:9017655): pid=17882 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3155 res=1
type=USER_START msg=audit(1463511901.688:9017656): pid=17882 uid=0 auid=0 ses=3155 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463511901.692:9017657): pid=17882 uid=0 auid=0 ses=3155 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463511901.692:9017658): pid=17882 uid=0 auid=0 ses=3155 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1463512138.976:9017659): pid=18174 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_ACCT msg=audit(1463512138.976:9017660): pid=18174 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_CMD msg=audit(1463512138.976:9017661): pid=18174 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/tmp/im" cmd=6170742D67657420757064617465 terminal=pts/24 res=success'
type=CRED_REFR msg=audit(1463512138.976:9017662): pid=18174 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_START msg=audit(1463512138.976:9017663): pid=18174 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_END msg=audit(1463512156.336:9017664): pid=18174 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=CRED_DISP msg=audit(1463512156.336:9017665): pid=18174 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_CMD msg=audit(1463512156.344:9017666): pid=20142 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/tmp/im" cmd=6170742D676574202D7520646973742D75706772616465 terminal=pts/24 res=success'
type=CRED_REFR msg=audit(1463512156.344:9017667): pid=20142 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_START msg=audit(1463512156.344:9017668): pid=20142 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_START msg=audit(1463512160.284:9017669): pid=20159 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1463512187.092:9017670): pid=20142 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=CRED_DISP msg=audit(1463512187.092:9017671): pid=20142 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success'
type=USER_START msg=audit(1463512340.328:9017672): pid=20981 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463512501.700:9017673): pid=21200 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463512501.700:9017674): pid=21200 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463512501.700:9017675): pid=21200 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3156 res=1
type=USER_START msg=audit(1463512501.700:9017676): pid=21200 uid=0 auid=0 ses=3156 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463512501.704:9017677): pid=21200 uid=0 auid=0 ses=3156 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463512501.704:9017678): pid=21200 uid=0 auid=0 ses=3156 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463512621.708:9017679): pid=21338 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463512621.708:9017680): pid=21338 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463512621.708:9017681): pid=21338 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3157 res=1
type=USER_START msg=audit(1463512621.712:9017682): pid=21338 uid=0 auid=0 ses=3157 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463512621.716:9017683): pid=21338 uid=0 auid=0 ses=3157 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463512621.716:9017684): pid=21338 uid=0 auid=0 ses=3157 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463513101.720:9017685): pid=21904 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463513101.720:9017686): pid=21904 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463513101.720:9017687): pid=21904 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3158 res=1
type=USER_START msg=audit(1463513101.720:9017688): pid=21904 uid=0 auid=0 ses=3158 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463513101.724:9017689): pid=21904 uid=0 auid=0 ses=3158 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463513101.724:9017690): pid=21904 uid=0 auid=0 ses=3158 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463513701.732:9017691): pid=22604 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463513701.732:9017692): pid=22604 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463513701.732:9017693): pid=22604 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3159 res=1
type=USER_START msg=audit(1463513701.736:9017694): pid=22604 uid=0 auid=0 ses=3159 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463513701.736:9017695): pid=22604 uid=0 auid=0 ses=3159 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463513701.736:9017696): pid=22604 uid=0 auid=0 ses=3159 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463514301.744:9017697): pid=23320 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463514301.744:9017698): pid=23320 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463514301.744:9017699): pid=23320 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3160 res=1
type=USER_START msg=audit(1463514301.748:9017700): pid=23320 uid=0 auid=0 ses=3160 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463514301.748:9017701): pid=23320 uid=0 auid=0 ses=3160 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463514301.752:9017702): pid=23320 uid=0 auid=0 ses=3160 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463514901.757:9017703): pid=24062 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463514901.757:9017704): pid=24062 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463514901.757:9017705): pid=24062 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3161 res=1
type=USER_START msg=audit(1463514901.761:9017706): pid=24062 uid=0 auid=0 ses=3161 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463514901.761:9017707): pid=24062 uid=0 auid=0 ses=3161 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463514901.761:9017708): pid=24062 uid=0 auid=0 ses=3161 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463515250.845:9017709): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463515261.169:9017710): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463515501.769:9017711): pid=24798 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463515501.769:9017712): pid=24798 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463515501.769:9017713): pid=24798 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3162 res=1
type=USER_START msg=audit(1463515501.773:9017714): pid=24798 uid=0 auid=0 ses=3162 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463515501.773:9017715): pid=24798 uid=0 auid=0 ses=3162 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463515501.777:9017716): pid=24798 uid=0 auid=0 ses=3162 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AVC msg=audit(1463515665.113:9017717): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_ACCT msg=audit(1463516101.785:9017718): pid=25517 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463516101.785:9017719): pid=25517 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463516101.785:9017720): pid=25517 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3163 res=1
type=USER_START msg=audit(1463516101.785:9017721): pid=25517 uid=0 auid=0 ses=3163 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463516101.789:9017722): pid=25517 uid=0 auid=0 ses=3163 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463516101.789:9017723): pid=25517 uid=0 auid=0 ses=3163 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463516221.797:9017724): pid=25660 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463516221.797:9017725): pid=25660 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463516221.797:9017726): pid=25660 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3164 res=1
type=USER_START msg=audit(1463516221.797:9017727): pid=25660 uid=0 auid=0 ses=3164 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463516221.801:9017728): pid=25660 uid=0 auid=0 ses=3164 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463516221.801:9017729): pid=25660 uid=0 auid=0 ses=3164 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463516701.806:9017730): pid=26217 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463516701.806:9017731): pid=26217 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463516701.806:9017732): pid=26217 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3165 res=1
type=USER_START msg=audit(1463516701.810:9017733): pid=26217 uid=0 auid=0 ses=3165 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463516701.814:9017734): pid=26217 uid=0 auid=0 ses=3165 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463516701.814:9017735): pid=26217 uid=0 auid=0 ses=3165 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463517301.818:9017736): pid=26930 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463517301.818:9017737): pid=26930 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463517301.818:9017738): pid=26930 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3166 res=1
type=USER_START msg=audit(1463517301.818:9017739): pid=26930 uid=0 auid=0 ses=3166 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463517301.822:9017740): pid=26930 uid=0 auid=0 ses=3166 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463517301.822:9017741): pid=26930 uid=0 auid=0 ses=3166 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463517901.830:9017742): pid=27645 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463517901.830:9017743): pid=27645 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463517901.830:9017744): pid=27645 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3167 res=1
type=USER_START msg=audit(1463517901.830:9017745): pid=27645 uid=0 auid=0 ses=3167 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463517901.834:9017746): pid=27645 uid=0 auid=0 ses=3167 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463517901.834:9017747): pid=27645 uid=0 auid=0 ses=3167 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463518501.842:9017748): pid=28343 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463518501.842:9017749): pid=28343 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463518501.842:9017750): pid=28343 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3168 res=1
type=USER_START msg=audit(1463518501.842:9017751): pid=28343 uid=0 auid=0 ses=3168 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463518501.846:9017752): pid=28343 uid=0 auid=0 ses=3168 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463518501.846:9017753): pid=28343 uid=0 auid=0 ses=3168 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463519101.851:9017754): pid=29031 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463519101.851:9017755): pid=29031 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463519101.851:9017756): pid=29031 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3169 res=1
type=USER_START msg=audit(1463519101.855:9017757): pid=29031 uid=0 auid=0 ses=3169 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463519101.855:9017758): pid=29031 uid=0 auid=0 ses=3169 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463519101.855:9017759): pid=29031 uid=0 auid=0 ses=3169 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463519701.863:9017760): pid=29723 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463519701.863:9017761): pid=29723 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463519701.863:9017762): pid=29723 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3170 res=1
type=USER_START msg=audit(1463519701.863:9017763): pid=29723 uid=0 auid=0 ses=3170 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463519701.867:9017764): pid=29723 uid=0 auid=0 ses=3170 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463519701.867:9017765): pid=29723 uid=0 auid=0 ses=3170 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463519821.875:9017766): pid=29868 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463519821.875:9017767): pid=29868 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463519821.875:9017768): pid=29868 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3171 res=1
type=USER_START msg=audit(1463519821.875:9017769): pid=29868 uid=0 auid=0 ses=3171 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463519821.879:9017770): pid=29868 uid=0 auid=0 ses=3171 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463519821.879:9017771): pid=29868 uid=0 auid=0 ses=3171 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463520301.884:9017772): pid=30420 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463520301.884:9017773): pid=30420 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463520301.888:9017774): pid=30420 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3172 res=1
type=USER_START msg=audit(1463520301.888:9017775): pid=30420 uid=0 auid=0 ses=3172 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463520301.892:9017776): pid=30420 uid=0 auid=0 ses=3172 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463520301.892:9017777): pid=30420 uid=0 auid=0 ses=3172 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463520901.896:9017778): pid=31122 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463520901.900:9017779): pid=31122 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463520901.900:9017780): pid=31122 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3173 res=1
type=USER_START msg=audit(1463520901.900:9017781): pid=31122 uid=0 auid=0 ses=3173 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463520901.904:9017782): pid=31122 uid=0 auid=0 ses=3173 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463520901.904:9017783): pid=31122 uid=0 auid=0 ses=3173 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463521501.909:9017784): pid=31822 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463521501.913:9017785): pid=31822 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463521501.913:9017786): pid=31822 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3174 res=1
type=USER_START msg=audit(1463521501.913:9017787): pid=31822 uid=0 auid=0 ses=3174 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463521501.917:9017788): pid=31822 uid=0 auid=0 ses=3174 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463521501.917:9017789): pid=31822 uid=0 auid=0 ses=3174 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463522101.921:9017790): pid=32516 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463522101.925:9017791): pid=32516 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463522101.925:9017792): pid=32516 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3175 res=1
type=USER_START msg=audit(1463522101.925:9017793): pid=32516 uid=0 auid=0 ses=3175 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463522101.929:9017794): pid=32516 uid=0 auid=0 ses=3175 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463522101.929:9017795): pid=32516 uid=0 auid=0 ses=3175 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AVC msg=audit(1463522605.490:9017796): pid=1194 uid=102 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/UPower" interface="org.freedesktop.UPower" member="EnumerateDevices" mask="send" name="org.freedesktop.UPower" pid=16774 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2922 peer_label="unconfined"  exe="/usr/bin/dbus-daemon" sauid=102 hostname=? addr=? terminal=?'
type=USER_ACCT msg=audit(1463522701.934:9017797): pid=780 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463522701.934:9017798): pid=780 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463522701.934:9017799): pid=780 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3176 res=1
type=USER_START msg=audit(1463522701.938:9017800): pid=780 uid=0 auid=0 ses=3176 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463522701.938:9017801): pid=780 uid=0 auid=0 ses=3176 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463522701.938:9017802): pid=780 uid=0 auid=0 ses=3176 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463523301.942:9017803): pid=1562 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463523301.942:9017804): pid=1562 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463523301.942:9017805): pid=1562 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3177 res=1
type=USER_START msg=audit(1463523301.946:9017806): pid=1562 uid=0 auid=0 ses=3177 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463523301.946:9017807): pid=1562 uid=0 auid=0 ses=3177 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463523301.946:9017808): pid=1562 uid=0 auid=0 ses=3177 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463523421.954:9017809): pid=1705 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463523421.954:9017810): pid=1705 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463523421.954:9017811): pid=1705 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3178 res=1
type=USER_START msg=audit(1463523421.954:9017812): pid=1705 uid=0 auid=0 ses=3178 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463523421.958:9017813): pid=1705 uid=0 auid=0 ses=3178 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463523421.958:9017814): pid=1705 uid=0 auid=0 ses=3178 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463523901.966:9017815): pid=2289 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463523901.966:9017816): pid=2289 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463523901.966:9017817): pid=2289 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3179 res=1
type=USER_START msg=audit(1463523901.966:9017818): pid=2289 uid=0 auid=0 ses=3179 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463523901.970:9017819): pid=2289 uid=0 auid=0 ses=3179 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463523901.970:9017820): pid=2289 uid=0 auid=0 ses=3179 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463523953.810:9017821): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=apt-daily comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463523953.810:9017822): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=apt-daily comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1463524040.271:9017823): pid=4893 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463524201.975:9017824): pid=5117 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463524201.975:9017825): pid=5117 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463524201.975:9017826): pid=5117 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3180 res=1
type=USER_START msg=audit(1463524201.975:9017827): pid=5117 uid=0 auid=0 ses=3180 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463524230.383:9017828): pid=5117 uid=0 auid=0 ses=3180 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463524230.383:9017829): pid=5117 uid=0 auid=0 ses=3180 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463524501.391:9017830): pid=5491 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463524501.391:9017831): pid=5491 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463524501.391:9017832): pid=5491 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3181 res=1
type=USER_START msg=audit(1463524501.391:9017833): pid=5491 uid=0 auid=0 ses=3181 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463524501.395:9017834): pid=5491 uid=0 auid=0 ses=3181 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463524501.395:9017835): pid=5491 uid=0 auid=0 ses=3181 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463525101.399:9017836): pid=6202 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463525101.399:9017837): pid=6202 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463525101.403:9017838): pid=6202 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3182 res=1
type=USER_START msg=audit(1463525101.403:9017839): pid=6202 uid=0 auid=0 ses=3182 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463525101.407:9017840): pid=6202 uid=0 auid=0 ses=3182 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463525101.407:9017841): pid=6202 uid=0 auid=0 ses=3182 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463525701.412:9017842): pid=6882 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463525701.412:9017843): pid=6882 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463525701.412:9017844): pid=6882 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3183 res=1
type=USER_START msg=audit(1463525701.416:9017845): pid=6882 uid=0 auid=0 ses=3183 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463525701.416:9017846): pid=6882 uid=0 auid=0 ses=3183 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463525701.420:9017847): pid=6882 uid=0 auid=0 ses=3183 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463526001.424:9017848): pid=7239 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463526001.424:9017849): pid=7239 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463526001.424:9017850): pid=7239 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3184 res=1
type=USER_START msg=audit(1463526001.424:9017851): pid=7239 uid=0 auid=0 ses=3184 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463526068.636:9017852): pid=7239 uid=0 auid=0 ses=3184 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463526068.636:9017853): pid=7239 uid=0 auid=0 ses=3184 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463526301.640:9017854): pid=7596 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463526301.640:9017855): pid=7596 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463526301.640:9017856): pid=7596 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3185 res=1
type=USER_START msg=audit(1463526301.640:9017857): pid=7596 uid=0 auid=0 ses=3185 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463526301.644:9017858): pid=7596 uid=0 auid=0 ses=3185 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463526301.644:9017859): pid=7596 uid=0 auid=0 ses=3185 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463526901.653:9017860): pid=8301 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463526901.653:9017861): pid=8301 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463526901.653:9017862): pid=8301 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3186 res=1
type=USER_START msg=audit(1463526901.653:9017863): pid=8301 uid=0 auid=0 ses=3186 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463526901.657:9017864): pid=8301 uid=0 auid=0 ses=3186 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463526901.657:9017865): pid=8301 uid=0 auid=0 ses=3186 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463527021.665:9017866): pid=8449 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463527021.665:9017867): pid=8449 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463527021.665:9017868): pid=8449 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3187 res=1
type=USER_START msg=audit(1463527021.665:9017869): pid=8449 uid=0 auid=0 ses=3187 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463527021.669:9017870): pid=8449 uid=0 auid=0 ses=3187 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463527021.669:9017871): pid=8449 uid=0 auid=0 ses=3187 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463527501.673:9017872): pid=9011 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463527501.673:9017873): pid=9011 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463527501.673:9017874): pid=9011 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3188 res=1
type=USER_START msg=audit(1463527501.677:9017875): pid=9011 uid=0 auid=0 ses=3188 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463527501.677:9017876): pid=9011 uid=0 auid=0 ses=3188 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463527501.681:9017877): pid=9011 uid=0 auid=0 ses=3188 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463528101.685:9017878): pid=9708 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463528101.685:9017879): pid=9708 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463528101.685:9017880): pid=9708 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3189 res=1
type=USER_START msg=audit(1463528101.689:9017881): pid=9708 uid=0 auid=0 ses=3189 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463528101.693:9017882): pid=9708 uid=0 auid=0 ses=3189 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463528101.693:9017883): pid=9708 uid=0 auid=0 ses=3189 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463528701.697:9017884): pid=10430 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463528701.697:9017885): pid=10430 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463528701.697:9017886): pid=10430 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3190 res=1
type=USER_START msg=audit(1463528701.701:9017887): pid=10430 uid=0 auid=0 ses=3190 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463528701.701:9017888): pid=10430 uid=0 auid=0 ses=3190 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463528701.701:9017889): pid=10430 uid=0 auid=0 ses=3190 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463529301.709:9017890): pid=11135 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463529301.709:9017891): pid=11135 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463529301.709:9017892): pid=11135 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3191 res=1
type=USER_START msg=audit(1463529301.709:9017893): pid=11135 uid=0 auid=0 ses=3191 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463529301.713:9017894): pid=11135 uid=0 auid=0 ses=3191 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463529301.713:9017895): pid=11135 uid=0 auid=0 ses=3191 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463529901.721:9017896): pid=11841 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463529901.721:9017897): pid=11841 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463529901.721:9017898): pid=11841 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3192 res=1
type=USER_START msg=audit(1463529901.721:9017899): pid=11841 uid=0 auid=0 ses=3192 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463529901.725:9017900): pid=11841 uid=0 auid=0 ses=3192 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463529901.725:9017901): pid=11841 uid=0 auid=0 ses=3192 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463530501.733:9017902): pid=12541 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463530501.733:9017903): pid=12541 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463530501.733:9017904): pid=12541 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3193 res=1
type=USER_START msg=audit(1463530501.733:9017905): pid=12541 uid=0 auid=0 ses=3193 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463530501.737:9017906): pid=12541 uid=0 auid=0 ses=3193 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463530501.737:9017907): pid=12541 uid=0 auid=0 ses=3193 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463530621.745:9017908): pid=12680 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463530621.745:9017909): pid=12680 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463530621.745:9017910): pid=12680 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3194 res=1
type=USER_START msg=audit(1463530621.745:9017911): pid=12680 uid=0 auid=0 ses=3194 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463530621.749:9017912): pid=12680 uid=0 auid=0 ses=3194 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463530621.749:9017913): pid=12680 uid=0 auid=0 ses=3194 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463530996.437:9017914): pid=13141 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463530996.441:9017915): pid=13141 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463530996.593:9017916): pid=13141 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463531006.953:9017917): pid=13141 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463531007.157:9017918): pid=13141 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463531007.165:9017919): pid=13378 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463531007.165:9017920): pid=13378 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463531007.289:9017921): pid=13378 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463531015.053:9017922): pid=13378 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463531015.277:9017923): pid=13378 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463531015.285:9017924): pid=13610 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463531015.285:9017925): pid=13610 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463531015.397:9017926): pid=13610 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463531031.625:9017927): pid=13610 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463531031.801:9017928): pid=13610 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463531031.813:9017929): pid=14052 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463531031.813:9017930): pid=14052 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463531031.921:9017931): pid=14052 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_AUTH msg=audit(1463531047.769:9017932): pid=14275 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_ACCT msg=audit(1463531047.769:9017933): pid=14275 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_CMD msg=audit(1463531047.769:9017934): pid=14275 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/trees/linux" cmd=726D202F7661722F6C6F672F6C6962766972742F71656D752F7365632D78656E69616C2D693338362E6C6F67 terminal=pts/17 res=success'
type=CRED_REFR msg=audit(1463531047.769:9017935): pid=14275 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_START msg=audit(1463531047.769:9017936): pid=14275 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_END msg=audit(1463531047.769:9017937): pid=14275 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=CRED_DISP msg=audit(1463531047.769:9017938): pid=14275 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_END msg=audit(1463531049.245:9017939): pid=14052 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463531049.461:9017940): pid=14052 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463531049.469:9017941): pid=14475 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463531049.469:9017942): pid=14475 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463531049.593:9017943): pid=14475 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_CMD msg=audit(1463531049.921:9017944): pid=14617 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/trees/linux" cmd=726D202F7661722F6C6F672F6C6962766972742F71656D752F7365632D78656E69616C2D616D6436342E6C6F67 terminal=pts/17 res=success'
type=CRED_REFR msg=audit(1463531049.921:9017945): pid=14617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_START msg=audit(1463531049.921:9017946): pid=14617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_END msg=audit(1463531049.921:9017947): pid=14617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=CRED_DISP msg=audit(1463531049.921:9017948): pid=14617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_END msg=audit(1463531053.213:9017949): pid=14475 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463531053.397:9017950): pid=14475 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463531053.405:9017951): pid=14691 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463531053.405:9017952): pid=14691 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463531053.509:9017953): pid=14691 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463531058.425:9017954): pid=14691 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463531058.605:9017955): pid=14691 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463531058.613:9017956): pid=14914 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463531058.613:9017957): pid=14914 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463531058.721:9017958): pid=14914 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_END msg=audit(1463531060.313:9017959): pid=14914 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463531060.497:9017960): pid=14914 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_ACCT msg=audit(1463531060.505:9017961): pid=15196 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_ACQ msg=audit(1463531060.505:9017962): pid=15196 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_START msg=audit(1463531060.625:9017963): pid=15196 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=USER_CMD msg=audit(1463531061.201:9017964): pid=15405 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/trees/linux" cmd=73657276696365206C6962766972742D62696E2072657374617274 terminal=pts/17 res=success'
type=CRED_REFR msg=audit(1463531061.201:9017965): pid=15405 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_START msg=audit(1463531061.201:9017966): pid=15405 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=SERVICE_START msg=audit(1463531061.253:9017967): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=libvirt-bin comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463531061.253:9017968): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=libvirt-bin comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1463531061.329:9017969): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=libvirt-bin comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1463531061.329:9017970): pid=15405 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=CRED_DISP msg=audit(1463531061.329:9017971): pid=15405 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=NETFILTER_CFG msg=audit(1463531061.445:9017972): table=mangle family=2 entries=7
type=SYSCALL msg=audit(1463531061.445:9017972): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bb58b0 items=0 ppid=15414 pid=15436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.445:9017972): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006D616E676C65002D2D64656C65746500504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B5355
type=NETFILTER_CFG msg=audit(1463531061.453:9017973): table=nat family=2 entries=10
type=SYSCALL msg=audit(1463531061.453:9017973): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10d44a0 items=0 ppid=15414 pid=15437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.453:9017973): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E
type=NETFILTER_CFG msg=audit(1463531061.469:9017974): table=nat family=2 entries=9
type=SYSCALL msg=audit(1463531061.469:9017974): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2212320 items=0 ppid=15414 pid=15438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.469:9017974): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E
type=NETFILTER_CFG msg=audit(1463531061.477:9017975): table=nat family=2 entries=8
type=SYSCALL msg=audit(1463531061.477:9017975): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1cc1170 items=0 ppid=15414 pid=15439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.477:9017975): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351
type=NETFILTER_CFG msg=audit(1463531061.485:9017976): table=nat family=2 entries=7
type=SYSCALL msg=audit(1463531061.485:9017976): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d65170 items=0 ppid=15414 pid=15440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.485:9017976): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351
type=NETFILTER_CFG msg=audit(1463531061.493:9017977): table=nat family=2 entries=6
type=SYSCALL msg=audit(1463531061.493:9017977): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1c4a610 items=0 ppid=15414 pid=15441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.493:9017977): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445
type=NETFILTER_CFG msg=audit(1463531061.505:9017978): table=filter family=2 entries=14
type=SYSCALL msg=audit(1463531061.505:9017978): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2285c00 items=0 ppid=15414 pid=15442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.505:9017978): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374
type=NETFILTER_CFG msg=audit(1463531061.513:9017979): table=filter family=2 entries=13
type=SYSCALL msg=audit(1463531061.513:9017979): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fb0bb0 items=0 ppid=15414 pid=15443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.513:9017979): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.521:9017980): table=filter family=2 entries=12
type=SYSCALL msg=audit(1463531061.521:9017980): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16c7a40 items=0 ppid=15414 pid=15444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.521:9017980): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.529:9017981): table=filter family=2 entries=11
type=SYSCALL msg=audit(1463531061.529:9017981): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=18c5db0 items=0 ppid=15414 pid=15445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.529:9017981): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354
type=NETFILTER_CFG msg=audit(1463531061.541:9017982): table=filter family=2 entries=10
type=SYSCALL msg=audit(1463531061.541:9017982): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=703c40 items=0 ppid=15414 pid=15446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.541:9017982): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354
type=NETFILTER_CFG msg=audit(1463531061.549:9017983): table=filter family=2 entries=9
type=SYSCALL msg=audit(1463531061.549:9017983): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=114d860 items=0 ppid=15414 pid=15447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.549:9017983): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.557:9017984): table=filter family=2 entries=8
type=SYSCALL msg=audit(1463531061.557:9017984): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f1fcd0 items=0 ppid=15414 pid=15448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.557:9017984): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.565:9017985): table=filter family=2 entries=7
type=SYSCALL msg=audit(1463531061.565:9017985): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2085160 items=0 ppid=15414 pid=15449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.565:9017985): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C657465004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.577:9017986): table=filter family=2 entries=6
type=SYSCALL msg=audit(1463531061.577:9017986): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2389180 items=0 ppid=15414 pid=15450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.577:9017986): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.585:9017987): table=filter family=2 entries=5
type=SYSCALL msg=audit(1463531061.585:9017987): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2324cd0 items=0 ppid=15414 pid=15451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.585:9017987): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.593:9017988): table=filter family=2 entries=4
type=SYSCALL msg=audit(1463531061.593:9017988): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=836cd0 items=0 ppid=15414 pid=15452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.593:9017988): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.605:9017989): table=filter family=2 entries=5
type=SYSCALL msg=audit(1463531061.605:9017989): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2277160 items=0 ppid=15414 pid=15453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.605:9017989): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.613:9017990): table=filter family=2 entries=6
type=SYSCALL msg=audit(1463531061.613:9017990): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=251e160 items=0 ppid=15414 pid=15454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.613:9017990): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E73657274004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.621:9017991): table=filter family=2 entries=7
type=SYSCALL msg=audit(1463531061.621:9017991): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17a9010 items=0 ppid=15414 pid=15455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.621:9017991): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.633:9017992): table=filter family=2 entries=8
type=SYSCALL msg=audit(1463531061.633:9017992): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a137a0 items=0 ppid=15414 pid=15456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.633:9017992): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.641:9017993): table=filter family=2 entries=9
type=SYSCALL msg=audit(1463531061.641:9017993): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f4fba0 items=0 ppid=15414 pid=15457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.641:9017993): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354
type=NETFILTER_CFG msg=audit(1463531061.649:9017994): table=filter family=2 entries=10
type=SYSCALL msg=audit(1463531061.649:9017994): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9fbd20 items=0 ppid=15414 pid=15458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.649:9017994): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354
type=NETFILTER_CFG msg=audit(1463531061.657:9017995): table=filter family=2 entries=11
type=SYSCALL msg=audit(1463531061.657:9017995): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e429a0 items=0 ppid=15414 pid=15459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.657:9017995): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.669:9017996): table=filter family=2 entries=12
type=SYSCALL msg=audit(1463531061.669:9017996): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24a9b20 items=0 ppid=15414 pid=15460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.669:9017996): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531061.677:9017997): table=filter family=2 entries=13
type=SYSCALL msg=audit(1463531061.677:9017997): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ca8c10 items=0 ppid=15414 pid=15461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.677:9017997): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374
type=NETFILTER_CFG msg=audit(1463531061.685:9017998): table=nat family=2 entries=5
type=SYSCALL msg=audit(1463531061.685:9017998): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1d13610 items=0 ppid=15414 pid=15462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.685:9017998): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445
type=NETFILTER_CFG msg=audit(1463531061.697:9017999): table=nat family=2 entries=6
type=SYSCALL msg=audit(1463531061.697:9017999): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=af0170 items=0 ppid=15414 pid=15463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.697:9017999): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351
type=NETFILTER_CFG msg=audit(1463531061.705:9018000): table=nat family=2 entries=7
type=SYSCALL msg=audit(1463531061.705:9018000): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e37170 items=0 ppid=15414 pid=15464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.705:9018000): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351
type=NETFILTER_CFG msg=audit(1463531061.713:9018001): table=nat family=2 entries=8
type=SYSCALL msg=audit(1463531061.713:9018001): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a9e370 items=0 ppid=15414 pid=15465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.713:9018001): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E
type=NETFILTER_CFG msg=audit(1463531061.721:9018002): table=nat family=2 entries=9
type=SYSCALL msg=audit(1463531061.721:9018002): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b494a0 items=0 ppid=15414 pid=15466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.721:9018002): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E
type=NETFILTER_CFG msg=audit(1463531061.729:9018003): table=mangle family=2 entries=6
type=SYSCALL msg=audit(1463531061.729:9018003): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1d7d8b0 items=0 ppid=15414 pid=15467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531061.729:9018003): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006D616E676C65002D2D696E7365727400504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B5355
type=USER_END msg=audit(1463531062.257:9018004): pid=15196 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=CRED_DISP msg=audit(1463531062.485:9018005): pid=15196 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/schroot" hostname=hunt addr=127.0.1.1 terminal=/dev/pts/16 res=success'
type=NETFILTER_CFG msg=audit(1463531062.545:9018006): table=filter family=2 entries=0
type=NETFILTER_CFG msg=audit(1463531062.545:9018006): table=filter family=10 entries=0
type=NETFILTER_CFG msg=audit(1463531062.545:9018006): table=nat family=2 entries=0
type=NETFILTER_CFG msg=audit(1463531062.545:9018006): table=mangle family=2 entries=0
type=SYSCALL msg=audit(1463531062.545:9018006): arch=c000003e syscall=56 success=yes exit=15541 a0=6c020011 a1=7f25ac4e2420 a2=99f a3=e items=0 ppid=1 pid=15430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=PROCTITLE msg=audit(1463531062.545:9018006): proctitle="/usr/sbin/libvirtd"
type=USER_CMD msg=audit(1463531083.169:9018007): pid=15693 uid=1000 auid=4294967295 ses=4294967295 msg='cwd="/home/sarnold/trees/linux" cmd=73797374656D63746C2072657374617274206C6962766972742D62696E2E73657276696365 terminal=pts/17 res=success'
type=CRED_REFR msg=audit(1463531083.169:9018008): pid=15693 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=USER_START msg=audit(1463531083.169:9018009): pid=15693 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=SERVICE_STOP msg=audit(1463531083.181:9018010): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=libvirt-bin comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1463531083.237:9018011): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=libvirt-bin comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1463531083.237:9018012): pid=15693 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=CRED_DISP msg=audit(1463531083.237:9018013): pid=15693 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/17 res=success'
type=NETFILTER_CFG msg=audit(1463531083.309:9018014): table=mangle family=2 entries=7
type=SYSCALL msg=audit(1463531083.309:9018014): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=133f8b0 items=0 ppid=15696 pid=15718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.309:9018014): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006D616E676C65002D2D64656C65746500504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B5355
type=NETFILTER_CFG msg=audit(1463531083.317:9018015): table=nat family=2 entries=10
type=SYSCALL msg=audit(1463531083.317:9018015): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=13154a0 items=0 ppid=15696 pid=15719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.317:9018015): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E
type=NETFILTER_CFG msg=audit(1463531083.325:9018016): table=nat family=2 entries=9
type=SYSCALL msg=audit(1463531083.325:9018016): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1271320 items=0 ppid=15696 pid=15720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.325:9018016): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E
type=NETFILTER_CFG msg=audit(1463531083.333:9018017): table=nat family=2 entries=8
type=SYSCALL msg=audit(1463531083.333:9018017): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e1f170 items=0 ppid=15696 pid=15721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.333:9018017): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351
type=NETFILTER_CFG msg=audit(1463531083.341:9018018): table=nat family=2 entries=7
type=SYSCALL msg=audit(1463531083.341:9018018): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=21e8170 items=0 ppid=15696 pid=15722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.341:9018018): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351
type=NETFILTER_CFG msg=audit(1463531083.349:9018019): table=nat family=2 entries=6
type=SYSCALL msg=audit(1463531083.349:9018019): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7b3610 items=0 ppid=15696 pid=15723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.349:9018019): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D64656C65746500504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445
type=NETFILTER_CFG msg=audit(1463531083.361:9018020): table=filter family=2 entries=14
type=SYSCALL msg=audit(1463531083.361:9018020): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10c2c00 items=0 ppid=15696 pid=15724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.361:9018020): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374
type=NETFILTER_CFG msg=audit(1463531083.369:9018021): table=filter family=2 entries=13
type=SYSCALL msg=audit(1463531083.369:9018021): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=948bb0 items=0 ppid=15696 pid=15725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.369:9018021): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.377:9018022): table=filter family=2 entries=12
type=SYSCALL msg=audit(1463531083.377:9018022): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1092a40 items=0 ppid=15696 pid=15726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.377:9018022): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.385:9018023): table=filter family=2 entries=11
type=SYSCALL msg=audit(1463531083.385:9018023): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=265fdb0 items=0 ppid=15696 pid=15727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.385:9018023): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354
type=NETFILTER_CFG msg=audit(1463531083.393:9018024): table=filter family=2 entries=10
type=SYSCALL msg=audit(1463531083.393:9018024): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2475c40 items=0 ppid=15696 pid=15728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.393:9018024): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354
type=NETFILTER_CFG msg=audit(1463531083.401:9018025): table=filter family=2 entries=9
type=SYSCALL msg=audit(1463531083.401:9018025): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8cd860 items=0 ppid=15696 pid=15729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.401:9018025): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.409:9018026): table=filter family=2 entries=8
type=SYSCALL msg=audit(1463531083.409:9018026): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=15d7cd0 items=0 ppid=15696 pid=15730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.409:9018026): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.417:9018027): table=filter family=2 entries=7
type=SYSCALL msg=audit(1463531083.417:9018027): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b8b160 items=0 ppid=15696 pid=15731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.417:9018027): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C657465004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.429:9018028): table=filter family=2 entries=6
type=SYSCALL msg=audit(1463531083.429:9018028): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a1e180 items=0 ppid=15696 pid=15732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.429:9018028): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.445:9018029): table=filter family=2 entries=5
type=SYSCALL msg=audit(1463531083.445:9018029): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24ebcd0 items=0 ppid=15696 pid=15733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.445:9018029): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D64656C65746500494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.457:9018030): table=filter family=2 entries=4
type=SYSCALL msg=audit(1463531083.457:9018030): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16cccd0 items=0 ppid=15696 pid=15734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.457:9018030): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.469:9018031): table=filter family=2 entries=5
type=SYSCALL msg=audit(1463531083.469:9018031): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1d27160 items=0 ppid=15696 pid=15735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.469:9018031): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.481:9018032): table=filter family=2 entries=6
type=SYSCALL msg=audit(1463531083.481:9018032): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a7e160 items=0 ppid=15696 pid=15736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.481:9018032): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E73657274004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.493:9018033): table=filter family=2 entries=7
type=SYSCALL msg=audit(1463531083.493:9018033): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a9e010 items=0 ppid=15696 pid=15737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.493:9018033): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.513:9018034): table=filter family=2 entries=8
type=SYSCALL msg=audit(1463531083.513:9018034): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=173b7a0 items=0 ppid=15696 pid=15738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.513:9018034): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.529:9018035): table=filter family=2 entries=9
type=SYSCALL msg=audit(1463531083.529:9018035): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=171bba0 items=0 ppid=15696 pid=15739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.529:9018035): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354
type=NETFILTER_CFG msg=audit(1463531083.541:9018036): table=filter family=2 entries=10
type=SYSCALL msg=audit(1463531083.541:9018036): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2140d20 items=0 ppid=15696 pid=15740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.541:9018036): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354
type=NETFILTER_CFG msg=audit(1463531083.553:9018037): table=filter family=2 entries=11
type=SYSCALL msg=audit(1463531083.553:9018037): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1dab9a0 items=0 ppid=15696 pid=15741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.553:9018037): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.569:9018038): table=filter family=2 entries=12
type=SYSCALL msg=audit(1463531083.569:9018038): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1d97b20 items=0 ppid=15696 pid=15742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.569:9018038): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054
type=NETFILTER_CFG msg=audit(1463531083.585:9018039): table=filter family=2 entries=13
type=SYSCALL msg=audit(1463531083.585:9018039): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e05c10 items=0 ppid=15696 pid=15743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.585:9018039): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374
type=NETFILTER_CFG msg=audit(1463531083.597:9018040): table=nat family=2 entries=5
type=SYSCALL msg=audit(1463531083.597:9018040): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=127d610 items=0 ppid=15696 pid=15744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.597:9018040): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445
type=NETFILTER_CFG msg=audit(1463531083.613:9018041): table=nat family=2 entries=6
type=SYSCALL msg=audit(1463531083.613:9018041): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=6c1170 items=0 ppid=15696 pid=15745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.613:9018041): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351
type=NETFILTER_CFG msg=audit(1463531083.625:9018042): table=nat family=2 entries=7
type=SYSCALL msg=audit(1463531083.625:9018042): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2277170 items=0 ppid=15696 pid=15746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.625:9018042): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351
type=NETFILTER_CFG msg=audit(1463531083.649:9018043): table=nat family=2 entries=8
type=SYSCALL msg=audit(1463531083.649:9018043): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=12bd370 items=0 ppid=15696 pid=15747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.649:9018043): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E
type=NETFILTER_CFG msg=audit(1463531083.669:9018044): table=nat family=2 entries=9
type=SYSCALL msg=audit(1463531083.669:9018044): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10b74a0 items=0 ppid=15696 pid=15748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.669:9018044): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E
type=NETFILTER_CFG msg=audit(1463531083.685:9018045): table=mangle family=2 entries=6
type=SYSCALL msg=audit(1463531083.685:9018045): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f368b0 items=0 ppid=15696 pid=15749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1463531083.685:9018045): proctitle=2F7362696E2F69707461626C6573002D77002D2D7461626C65006D616E676C65002D2D696E7365727400504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B5355
type=NETFILTER_CFG msg=audit(1463531084.449:9018046): table=filter family=2 entries=0
type=NETFILTER_CFG msg=audit(1463531084.449:9018046): table=filter family=10 entries=0
type=NETFILTER_CFG msg=audit(1463531084.449:9018046): table=nat family=2 entries=0
type=NETFILTER_CFG msg=audit(1463531084.449:9018046): table=mangle family=2 entries=0
type=SYSCALL msg=audit(1463531084.449:9018046): arch=c000003e syscall=56 success=yes exit=15758 a0=6c020011 a1=7f92fc1cae10 a2=99f a3=e items=0 ppid=1 pid=15712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=PROCTITLE msg=audit(1463531084.449:9018046): proctitle="/usr/sbin/libvirtd"
type=USER_ACCT msg=audit(1463531101.753:9018047): pid=15784 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463531101.753:9018048): pid=15784 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463531101.753:9018049): pid=15784 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3195 res=1
type=USER_START msg=audit(1463531101.757:9018050): pid=15784 uid=0 auid=0 ses=3195 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463531101.757:9018051): pid=15784 uid=0 auid=0 ses=3195 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463531101.761:9018052): pid=15784 uid=0 auid=0 ses=3195 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1463531216.729:9018053): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f" pid=16023 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531216.729:9018053): arch=c000003e syscall=1 success=yes exit=48069 a0=5 a1=1e832d0 a2=bbc5 a3=0 items=0 ppid=16022 pid=16023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531216.729:9018053): proctitle=2F7362696E2F61707061726D6F725F706172736572002D61002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=AVC msg=audit(1463531216.729:9018054): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f//qemu_bridge_helper" pid=16023 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531216.729:9018054): arch=c000003e syscall=1 success=yes exit=20577 a0=5 a1=1c57bd0 a2=5061 a3=0 items=0 ppid=16022 pid=16023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531216.729:9018054): proctitle=2F7362696E2F61707061726D6F725F706172736572002D61002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=VIRT_MACHINE_ID msg=audit(1463531216.733:9018055): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f vm-ctx=libvirt-65dd26c9-8322-46df-b40d-1732ff35010f img-ctx=libvirt-65dd26c9-8322-46df-b40d-1732ff35010f model=apparmor exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_MACHINE_ID msg=audit(1463531216.733:9018056): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f vm-ctx=+117:+126 img-ctx=+117:+126 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=ANOM_PROMISCUOUS msg=audit(1463531216.925:9018057): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
type=SYSCALL msg=audit(1463531216.925:9018057): arch=c000003e syscall=16 success=yes exit=0 a0=1c a1=89a2 a2=7f9322ee3410 a3=7f92f8007d40 items=0 ppid=1 pid=15699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=PROCTITLE msg=audit(1463531216.925:9018057): proctitle="/usr/sbin/libvirtd"
type=VIRT_RESOURCE msg=audit(1463531216.957:9018058): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=open vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f net=52:54:00:f8:13:c9 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531216.977:9018059): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=open vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f net=52:54:00:f8:13:c9 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463531217.141:9018060): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f" pid=16046 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531217.141:9018060): arch=c000003e syscall=1 success=yes exit=48069 a0=5 a1=ecabf0 a2=bbc5 a3=0 items=0 ppid=16045 pid=16046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531217.141:9018060): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=AVC msg=audit(1463531217.157:9018061): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f//qemu_bridge_helper" pid=16046 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531217.157:9018061): arch=c000003e syscall=1 success=yes exit=20577 a0=5 a1=e9c4e0 a2=5061 a3=0 items=0 ppid=16045 pid=16046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531217.157:9018061): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=VIRT_RESOURCE msg=audit(1463531217.245:9018062): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=deny vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-amd64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531217.245:9018063): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-amd64.libvirt-qemu/" class=path path="/home/sarnold/Canonical/vms/sec-xenial-amd64.qcow2" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531217.245:9018064): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-amd64.libvirt-qemu/" class=path path="/home/sarnold/Canonical/iso/cache/vmtools-sec-xenial-amd64-ubuntu-16.04-desktop-amd64.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531217.245:9018065): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-amd64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1463531217.725:9018066): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463531219.141:9018067): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1463531219.273:9018068): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531219.281:9018069): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=disk reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-disk="?" new-disk="/home/sarnold/Canonical/vms/sec-xenial-amd64.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531219.281:9018070): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=disk reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-disk="?" new-disk="/home/sarnold/Canonical/iso/cache/vmtools-sec-xenial-amd64-ubuntu-16.04-desktop-amd64.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531219.281:9018071): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-net="?" new-net="52:54:00:f8:13:c9" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531219.281:9018072): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=chardev reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-chardev="?" new-chardev="/dev/pts/15" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531219.281:9018073): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=mem reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531219.281:9018074): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=vcpu reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_CONTROL msg=audit(1463531219.281:9018075): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm op=start reason=booted vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f vm-pid=16049 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463531219.949:9018076): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612" pid=16263 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531219.949:9018076): arch=c000003e syscall=1 success=yes exit=47829 a0=5 a1=f6d9b0 a2=bad5 a3=0 items=0 ppid=16262 pid=16263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531219.949:9018076): proctitle=2F7362696E2F61707061726D6F725F706172736572002D61002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=AVC msg=audit(1463531219.949:9018077): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612//qemu_bridge_helper" pid=16263 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531219.949:9018077): arch=c000003e syscall=1 success=yes exit=20577 a0=5 a1=d2c4e0 a2=5061 a3=0 items=0 ppid=16262 pid=16263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531219.949:9018077): proctitle=2F7362696E2F61707061726D6F725F706172736572002D61002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=VIRT_MACHINE_ID msg=audit(1463531219.949:9018078): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 vm-ctx=libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612 img-ctx=libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612 model=apparmor exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_MACHINE_ID msg=audit(1463531219.949:9018079): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 vm-ctx=+117:+126 img-ctx=+117:+126 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=ANOM_PROMISCUOUS msg=audit(1463531220.041:9018080): dev=vnet1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
type=SYSCALL msg=audit(1463531220.041:9018080): arch=c000003e syscall=16 success=yes exit=0 a0=1f a1=89a2 a2=7f93236e4410 a3=7f92fc1e6100 items=0 ppid=1 pid=15698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=PROCTITLE msg=audit(1463531220.041:9018080): proctitle="/usr/sbin/libvirtd"
type=VIRT_RESOURCE msg=audit(1463531220.085:9018081): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=open vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 net=52:54:00:c2:e0:73 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.113:9018082): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=open vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 net=52:54:00:c2:e0:73 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463531220.241:9018083): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463531220.325:9018084): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612" pid=16311 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531220.325:9018084): arch=c000003e syscall=1 success=yes exit=47829 a0=5 a1=23cb020 a2=bad5 a3=0 items=0 ppid=16308 pid=16311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531220.325:9018084): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=AVC msg=audit(1463531220.345:9018085): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612//qemu_bridge_helper" pid=16311 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531220.345:9018085): arch=c000003e syscall=1 success=yes exit=20577 a0=5 a1=23b14e0 a2=5061 a3=0 items=0 ppid=16308 pid=16311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531220.345:9018085): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=VIRT_RESOURCE msg=audit(1463531220.361:9018086): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=deny vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-i386.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.361:9018087): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-i386.libvirt-qemu/" class=path path="/home/sarnold/Canonical/vms/sec-xenial-i386.qcow2" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.361:9018088): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-i386.libvirt-qemu/" class=path path="/home/sarnold/Canonical/iso/cache/vmtools-sec-xenial-i386-ubuntu-16.04-desktop-i386.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.361:9018089): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-i386.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1463531220.381:9018090): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.597:9018091): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=disk reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-disk="?" new-disk="/home/sarnold/Canonical/vms/sec-xenial-i386.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.597:9018092): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=disk reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-disk="?" new-disk="/home/sarnold/Canonical/iso/cache/vmtools-sec-xenial-i386-ubuntu-16.04-desktop-i386.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.597:9018093): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-net="?" new-net="52:54:00:c2:e0:73" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.597:9018094): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=chardev reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-chardev="?" new-chardev="/dev/pts/29" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.597:9018095): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=mem reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531220.597:9018096): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=vcpu reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_CONTROL msg=audit(1463531220.597:9018097): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm op=start reason=booted vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 vm-pid=16446 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463531230.168:9018098): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1463531281.854:9018099): pid=17094 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463531281.858:9018100): pid=17094 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1463531282.110:9018101): pid=17091 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=pts/16 res=success'
type=USER_AUTH msg=audit(1463531500.977:9018102): pid=18588 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463531500.977:9018103): pid=18588 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1463531500.993:9018104): pid=18585 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=pts/16 res=success'
type=USER_ACCT msg=audit(1463531521.769:9018105): pid=18754 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463531521.769:9018106): pid=18754 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463531521.769:9018107): pid=18754 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3196 res=1
type=USER_START msg=audit(1463531521.769:9018108): pid=18754 uid=0 auid=0 ses=3196 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463531521.773:9018109): pid=18754 uid=0 auid=0 ses=3196 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463531521.773:9018110): pid=18754 uid=0 auid=0 ses=3196 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463531701.777:9018111): pid=19678 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463531701.777:9018112): pid=19678 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463531701.777:9018113): pid=19678 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3197 res=1
type=USER_START msg=audit(1463531701.781:9018114): pid=19678 uid=0 auid=0 ses=3197 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463531701.805:9018115): pid=19678 uid=0 auid=0 ses=3197 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463531701.805:9018116): pid=19678 uid=0 auid=0 ses=3197 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=ANOM_PROMISCUOUS msg=audit(1463531871.690:9018117): dev=vnet1 prom=0 old_prom=256 auid=4294967295 uid=117 gid=126 ses=4294967295
type=SERVICE_START msg=audit(1463531871.754:9018118): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463531871.942:9018119): apparmor="STATUS" operation="profile_remove" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612" pid=20690 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531871.942:9018119): arch=c000003e syscall=1 success=yes exit=45 a0=4 a1=1592ea0 a2=2d a3=0 items=0 ppid=20685 pid=20690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531871.942:9018119): proctitle=2F7362696E2F61707061726D6F725F706172736572002D52002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=VIRT_CONTROL msg=audit(1463531871.946:9018120): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm op=stop reason=shutdown vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463531872.378:9018121): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612" pid=20704 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531872.378:9018121): arch=c000003e syscall=1 success=yes exit=46749 a0=5 a1=29368d0 a2=b69d a3=0 items=0 ppid=20703 pid=20704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531872.378:9018121): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=AVC msg=audit(1463531872.382:9018122): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612//qemu_bridge_helper" pid=20704 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531872.382:9018122): arch=c000003e syscall=1 success=yes exit=20577 a0=5 a1=274bd80 a2=5061 a3=0 items=0 ppid=20703 pid=20704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531872.382:9018122): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=VIRT_MACHINE_ID msg=audit(1463531872.382:9018123): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 vm-ctx=libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612 img-ctx=libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612 model=apparmor exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_MACHINE_ID msg=audit(1463531872.382:9018124): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 vm-ctx=+117:+126 img-ctx=+117:+126 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=ANOM_PROMISCUOUS msg=audit(1463531872.446:9018125): dev=vnet1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
type=SYSCALL msg=audit(1463531872.446:9018125): arch=c000003e syscall=16 success=yes exit=0 a0=20 a1=89a2 a2=7f9321ee1270 a3=7f92e8008980 items=0 ppid=1 pid=15701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=PROCTITLE msg=audit(1463531872.446:9018125): proctitle="/usr/sbin/libvirtd"
type=VIRT_RESOURCE msg=audit(1463531872.482:9018126): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=open vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 net=52:54:00:c2:e0:73 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531872.498:9018127): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=open vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 net=52:54:00:c2:e0:73 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463531872.642:9018128): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463531872.710:9018129): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612" pid=20749 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531872.710:9018129): arch=c000003e syscall=1 success=yes exit=46749 a0=5 a1=26c78e0 a2=b69d a3=0 items=0 ppid=20748 pid=20749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531872.710:9018129): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=AVC msg=audit(1463531872.726:9018130): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-7881b57e-abab-4388-ad18-d2ee6afb1612//qemu_bridge_helper" pid=20749 comm="apparmor_parser"
type=SYSCALL msg=audit(1463531872.726:9018130): arch=c000003e syscall=1 success=yes exit=20577 a0=5 a1=24684e0 a2=5061 a3=0 items=0 ppid=20748 pid=20749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463531872.726:9018130): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D37383831623537652D616261622D343338382D616431382D643265653661666231363132
type=VIRT_RESOURCE msg=audit(1463531872.742:9018131): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=deny vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-i386.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531872.742:9018132): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-i386.libvirt-qemu/" class=path path="/home/sarnold/Canonical/vms/sec-xenial-i386.qcow2" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531872.742:9018133): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-i386.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1463531872.754:9018134): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531872.998:9018135): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=disk reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-disk="?" new-disk="/home/sarnold/Canonical/vms/sec-xenial-i386.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531872.998:9018136): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-net="?" new-net="52:54:00:c2:e0:73" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531872.998:9018137): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=chardev reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-chardev="?" new-chardev="/dev/pts/29" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531872.998:9018138): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=mem reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463531872.998:9018139): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=vcpu reason=start vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_CONTROL msg=audit(1463531872.998:9018140): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm op=start reason=booted vm="sec-xenial-i386" uuid=7881b57e-abab-4388-ad18-d2ee6afb1612 vm-pid=20888 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463531883.170:9018141): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=ANOM_PROMISCUOUS msg=audit(1463532187.026:9018142): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=117 gid=126 ses=4294967295
type=SERVICE_START msg=audit(1463532187.086:9018143): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463532187.270:9018144): apparmor="STATUS" operation="profile_remove" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f" pid=22950 comm="apparmor_parser"
type=SYSCALL msg=audit(1463532187.270:9018144): arch=c000003e syscall=1 success=yes exit=45 a0=4 a1=18a9730 a2=2d a3=0 items=0 ppid=22945 pid=22950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463532187.270:9018144): proctitle=2F7362696E2F61707061726D6F725F706172736572002D52002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=VIRT_CONTROL msg=audit(1463532187.270:9018145): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm op=stop reason=shutdown vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463532187.946:9018146): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f" pid=22964 comm="apparmor_parser"
type=SYSCALL msg=audit(1463532187.946:9018146): arch=c000003e syscall=1 success=yes exit=46965 a0=5 a1=11c3470 a2=b775 a3=0 items=0 ppid=22963 pid=22964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463532187.946:9018146): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=AVC msg=audit(1463532187.946:9018147): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f//qemu_bridge_helper" pid=22964 comm="apparmor_parser"
type=SYSCALL msg=audit(1463532187.946:9018147): arch=c000003e syscall=1 success=yes exit=20577 a0=5 a1=11384e0 a2=5061 a3=0 items=0 ppid=22963 pid=22964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463532187.946:9018147): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=VIRT_MACHINE_ID msg=audit(1463532187.950:9018148): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f vm-ctx=libvirt-65dd26c9-8322-46df-b40d-1732ff35010f img-ctx=libvirt-65dd26c9-8322-46df-b40d-1732ff35010f model=apparmor exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_MACHINE_ID msg=audit(1463532187.950:9018149): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f vm-ctx=+117:+126 img-ctx=+117:+126 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=ANOM_PROMISCUOUS msg=audit(1463532188.002:9018150): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
type=SYSCALL msg=audit(1463532188.002:9018150): arch=c000003e syscall=16 success=yes exit=0 a0=1e a1=89a2 a2=7f93226e2270 a3=7f92ec0070c0 items=0 ppid=1 pid=15700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=PROCTITLE msg=audit(1463532188.002:9018150): proctitle="/usr/sbin/libvirtd"
type=VIRT_RESOURCE msg=audit(1463532188.038:9018151): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=open vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f net=52:54:00:f8:13:c9 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.054:9018152): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=open vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f net=52:54:00:f8:13:c9 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463532188.174:9018153): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1463532188.258:9018154): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f" pid=23019 comm="apparmor_parser"
type=SYSCALL msg=audit(1463532188.258:9018154): arch=c000003e syscall=1 success=yes exit=46965 a0=5 a1=2519660 a2=b775 a3=0 items=0 ppid=23007 pid=23019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463532188.258:9018154): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=AVC msg=audit(1463532188.278:9018155): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-65dd26c9-8322-46df-b40d-1732ff35010f//qemu_bridge_helper" pid=23019 comm="apparmor_parser"
type=SYSCALL msg=audit(1463532188.278:9018155): arch=c000003e syscall=1 success=yes exit=20577 a0=5 a1=24504e0 a2=5061 a3=0 items=0 ppid=23007 pid=23019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null)
type=PROCTITLE msg=audit(1463532188.278:9018155): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002F6574632F61707061726D6F722E642F6C6962766972742F6C6962766972742D36356464323663392D383332322D343664662D623430642D313733326666333530313066
type=SERVICE_START msg=audit(1463532188.282:9018156): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=ntp comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.318:9018157): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=deny vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-amd64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.318:9018158): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-amd64.libvirt-qemu/" class=path path="/home/sarnold/Canonical/vms/sec-xenial-amd64.qcow2" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.318:9018159): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=cgroup reason=allow vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f cgroup="/sys/fs/cgroup/devices/machine/sec-xenial-amd64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.570:9018160): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=disk reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-disk="?" new-disk="/home/sarnold/Canonical/vms/sec-xenial-amd64.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.570:9018161): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=net reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-net="?" new-net="52:54:00:f8:13:c9" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.570:9018162): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=chardev reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-chardev="?" new-chardev="/dev/pts/15" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.570:9018163): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=mem reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1463532188.570:9018164): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm resrc=vcpu reason=start vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_CONTROL msg=audit(1463532188.570:9018165): pid=15696 uid=0 auid=4294967295 ses=4294967295 msg='virt=kvm op=start reason=booted vm="sec-xenial-amd64" uuid=65dd26c9-8322-46df-b40d-1732ff35010f vm-pid=23161 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463532198.170:9018166): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463532301.807:9018167): pid=24129 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463532301.807:9018168): pid=24129 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463532301.807:9018169): pid=24129 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3198 res=1
type=USER_START msg=audit(1463532301.811:9018170): pid=24129 uid=0 auid=0 ses=3198 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463532301.811:9018171): pid=24129 uid=0 auid=0 ses=3198 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463532301.811:9018172): pid=24129 uid=0 auid=0 ses=3198 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463532901.819:9018173): pid=27553 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463532901.819:9018174): pid=27553 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463532901.819:9018175): pid=27553 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3199 res=1
type=USER_START msg=audit(1463532901.819:9018176): pid=27553 uid=0 auid=0 ses=3199 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463532901.823:9018177): pid=27553 uid=0 auid=0 ses=3199 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463532901.823:9018178): pid=27553 uid=0 auid=0 ses=3199 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463533501.832:9018179): pid=30653 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463533501.832:9018180): pid=30653 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463533501.832:9018181): pid=30653 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3200 res=1
type=USER_START msg=audit(1463533501.832:9018182): pid=30653 uid=0 auid=0 ses=3200 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463533501.836:9018183): pid=30653 uid=0 auid=0 ses=3200 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463533501.836:9018184): pid=30653 uid=0 auid=0 ses=3200 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463534101.843:9018185): pid=1318 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463534101.843:9018186): pid=1318 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463534101.843:9018187): pid=1318 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3201 res=1
type=USER_START msg=audit(1463534101.843:9018188): pid=1318 uid=0 auid=0 ses=3201 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463534101.847:9018189): pid=1318 uid=0 auid=0 ses=3201 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463534101.847:9018190): pid=1318 uid=0 auid=0 ses=3201 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463534221.851:9018191): pid=1941 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463534221.851:9018192): pid=1941 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463534221.851:9018193): pid=1941 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3202 res=1
type=USER_START msg=audit(1463534221.851:9018194): pid=1941 uid=0 auid=0 ses=3202 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463534221.855:9018195): pid=1941 uid=0 auid=0 ses=3202 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463534221.855:9018196): pid=1941 uid=0 auid=0 ses=3202 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463534701.863:9018197): pid=4814 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463534701.863:9018198): pid=4814 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463534701.863:9018199): pid=4814 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3203 res=1
type=USER_START msg=audit(1463534701.863:9018200): pid=4814 uid=0 auid=0 ses=3203 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463534701.867:9018201): pid=4814 uid=0 auid=0 ses=3203 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463534701.867:9018202): pid=4814 uid=0 auid=0 ses=3203 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463535301.877:9018203): pid=7891 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463535301.877:9018204): pid=7891 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463535301.877:9018205): pid=7891 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3204 res=1
type=USER_START msg=audit(1463535301.877:9018206): pid=7891 uid=0 auid=0 ses=3204 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463535301.881:9018207): pid=7891 uid=0 auid=0 ses=3204 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463535301.881:9018208): pid=7891 uid=0 auid=0 ses=3204 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463535901.887:9018209): pid=10557 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463535901.887:9018210): pid=10557 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463535901.887:9018211): pid=10557 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3205 res=1
type=USER_START msg=audit(1463535901.891:9018212): pid=10557 uid=0 auid=0 ses=3205 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463535901.891:9018213): pid=10557 uid=0 auid=0 ses=3205 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463535901.891:9018214): pid=10557 uid=0 auid=0 ses=3205 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463536501.900:9018215): pid=11532 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463536501.904:9018216): pid=11532 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463536501.904:9018217): pid=11532 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3206 res=1
type=USER_START msg=audit(1463536501.904:9018218): pid=11532 uid=0 auid=0 ses=3206 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463536501.908:9018219): pid=11532 uid=0 auid=0 ses=3206 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463536501.908:9018220): pid=11532 uid=0 auid=0 ses=3206 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463537101.911:9018221): pid=12242 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463537101.911:9018222): pid=12242 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463537101.915:9018223): pid=12242 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3207 res=1
type=USER_START msg=audit(1463537101.915:9018224): pid=12242 uid=0 auid=0 ses=3207 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463537101.919:9018225): pid=12242 uid=0 auid=0 ses=3207 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463537101.919:9018226): pid=12242 uid=0 auid=0 ses=3207 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463537701.925:9018227): pid=12942 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463537701.929:9018228): pid=12942 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463537701.929:9018229): pid=12942 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3208 res=1
type=USER_START msg=audit(1463537701.929:9018230): pid=12942 uid=0 auid=0 ses=3208 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463537701.933:9018231): pid=12942 uid=0 auid=0 ses=3208 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463537701.933:9018232): pid=12942 uid=0 auid=0 ses=3208 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463537821.937:9018233): pid=13091 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463537821.937:9018234): pid=13091 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463537821.937:9018235): pid=13091 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3209 res=1
type=USER_START msg=audit(1463537821.937:9018236): pid=13091 uid=0 auid=0 ses=3209 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463537821.941:9018237): pid=13091 uid=0 auid=0 ses=3209 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463537821.941:9018238): pid=13091 uid=0 auid=0 ses=3209 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1463538279.536:9018239): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=apt-daily comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1463538279.536:9018240): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=apt-daily comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463538301.948:9018241): pid=13723 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463538301.948:9018242): pid=13723 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463538301.948:9018243): pid=13723 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3210 res=1
type=USER_START msg=audit(1463538301.948:9018244): pid=13723 uid=0 auid=0 ses=3210 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463538301.952:9018245): pid=13723 uid=0 auid=0 ses=3210 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463538301.952:9018246): pid=13723 uid=0 auid=0 ses=3210 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463538901.959:9018247): pid=14436 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463538901.959:9018248): pid=14436 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463538901.959:9018249): pid=14436 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3211 res=1
type=USER_START msg=audit(1463538901.959:9018250): pid=14436 uid=0 auid=0 ses=3211 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463538901.963:9018251): pid=14436 uid=0 auid=0 ses=3211 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463538901.963:9018252): pid=14436 uid=0 auid=0 ses=3211 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463539501.970:9018253): pid=15163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463539501.970:9018254): pid=15163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463539501.970:9018255): pid=15163 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3212 res=1
type=USER_START msg=audit(1463539501.970:9018256): pid=15163 uid=0 auid=0 ses=3212 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463539501.974:9018257): pid=15163 uid=0 auid=0 ses=3212 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463539501.974:9018258): pid=15163 uid=0 auid=0 ses=3212 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463540101.986:9018259): pid=15877 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463540101.986:9018260): pid=15877 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463540101.986:9018261): pid=15877 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3213 res=1
type=USER_START msg=audit(1463540101.986:9018262): pid=15877 uid=0 auid=0 ses=3213 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463540101.990:9018263): pid=15877 uid=0 auid=0 ses=3213 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463540101.990:9018264): pid=15877 uid=0 auid=0 ses=3213 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463540401.997:9018265): pid=16228 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463540401.997:9018266): pid=16228 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463540401.997:9018267): pid=16228 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3214 res=1
type=USER_START msg=audit(1463540401.997:9018268): pid=16228 uid=0 auid=0 ses=3214 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463540682.921:9018269): pid=16228 uid=0 auid=0 ses=3214 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463540682.921:9018270): pid=16228 uid=0 auid=0 ses=3214 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463540701.941:9018271): pid=16600 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463540701.941:9018272): pid=16600 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463540701.941:9018273): pid=16600 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3215 res=1
type=USER_START msg=audit(1463540701.941:9018274): pid=16600 uid=0 auid=0 ses=3215 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463540701.945:9018275): pid=16600 uid=0 auid=0 ses=3215 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463540701.945:9018276): pid=16600 uid=0 auid=0 ses=3215 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463541301.953:9018277): pid=17352 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463541301.953:9018278): pid=17352 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463541301.953:9018279): pid=17352 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3216 res=1
type=USER_START msg=audit(1463541301.953:9018280): pid=17352 uid=0 auid=0 ses=3216 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463541301.957:9018281): pid=17352 uid=0 auid=0 ses=3216 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463541301.957:9018282): pid=17352 uid=0 auid=0 ses=3216 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463541421.961:9018283): pid=17494 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463541421.961:9018284): pid=17494 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463541421.961:9018285): pid=17494 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3217 res=1
type=USER_START msg=audit(1463541421.965:9018286): pid=17494 uid=0 auid=0 ses=3217 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463541421.965:9018287): pid=17494 uid=0 auid=0 ses=3217 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463541421.965:9018288): pid=17494 uid=0 auid=0 ses=3217 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463541901.974:9018289): pid=18073 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463541901.974:9018290): pid=18073 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463541901.974:9018291): pid=18073 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3218 res=1
type=USER_START msg=audit(1463541901.974:9018292): pid=18073 uid=0 auid=0 ses=3218 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463541901.978:9018293): pid=18073 uid=0 auid=0 ses=3218 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463541901.978:9018294): pid=18073 uid=0 auid=0 ses=3218 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463542501.983:9018295): pid=18779 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463542501.983:9018296): pid=18779 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463542501.983:9018297): pid=18779 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3219 res=1
type=USER_START msg=audit(1463542501.983:9018298): pid=18779 uid=0 auid=0 ses=3219 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463542501.987:9018299): pid=18779 uid=0 auid=0 ses=3219 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463542501.987:9018300): pid=18779 uid=0 auid=0 ses=3219 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463543101.996:9018301): pid=19475 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463543101.996:9018302): pid=19475 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463543101.996:9018303): pid=19475 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3220 res=1
type=USER_START msg=audit(1463543101.996:9018304): pid=19475 uid=0 auid=0 ses=3220 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463543102.000:9018305): pid=19475 uid=0 auid=0 ses=3220 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463543102.000:9018306): pid=19475 uid=0 auid=0 ses=3220 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463543701.009:9018307): pid=20177 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463543701.009:9018308): pid=20177 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463543701.009:9018309): pid=20177 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3221 res=1
type=USER_START msg=audit(1463543701.009:9018310): pid=20177 uid=0 auid=0 ses=3221 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463543701.013:9018311): pid=20177 uid=0 auid=0 ses=3221 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463543701.013:9018312): pid=20177 uid=0 auid=0 ses=3221 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463544301.018:9018313): pid=20871 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463544301.018:9018314): pid=20871 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463544301.018:9018315): pid=20871 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3222 res=1
type=USER_START msg=audit(1463544301.022:9018316): pid=20871 uid=0 auid=0 ses=3222 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463544301.022:9018317): pid=20871 uid=0 auid=0 ses=3222 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463544301.022:9018318): pid=20871 uid=0 auid=0 ses=3222 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463544901.031:9018319): pid=21617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463544901.031:9018320): pid=21617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463544901.031:9018321): pid=21617 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3223 res=1
type=USER_START msg=audit(1463544901.035:9018322): pid=21617 uid=0 auid=0 ses=3223 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463544901.039:9018323): pid=21617 uid=0 auid=0 ses=3223 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463544901.039:9018324): pid=21617 uid=0 auid=0 ses=3223 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463545021.043:9018325): pid=21762 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463545021.043:9018326): pid=21762 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463545021.043:9018327): pid=21762 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3224 res=1
type=USER_START msg=audit(1463545021.043:9018328): pid=21762 uid=0 auid=0 ses=3224 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463545021.047:9018329): pid=21762 uid=0 auid=0 ses=3224 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463545021.047:9018330): pid=21762 uid=0 auid=0 ses=3224 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463545501.056:9018331): pid=22330 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463545501.056:9018332): pid=22330 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463545501.056:9018333): pid=22330 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3225 res=1
type=USER_START msg=audit(1463545501.056:9018334): pid=22330 uid=0 auid=0 ses=3225 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463545501.060:9018335): pid=22330 uid=0 auid=0 ses=3225 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463545501.060:9018336): pid=22330 uid=0 auid=0 ses=3225 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463546101.068:9018337): pid=23043 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463546101.068:9018338): pid=23043 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463546101.068:9018339): pid=23043 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3226 res=1
type=USER_START msg=audit(1463546101.068:9018340): pid=23043 uid=0 auid=0 ses=3226 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463546101.072:9018341): pid=23043 uid=0 auid=0 ses=3226 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463546101.072:9018342): pid=23043 uid=0 auid=0 ses=3226 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1463546701.080:9018343): pid=23771 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1463546701.080:9018344): pid=23771 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1463546701.080:9018345): pid=23771 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3227 res=1
type=USER_START msg=audit(1463546701.080:9018346): pid=23771 uid=0 auid=0 ses=3227 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1463546701.084:9018347): pid=23771 uid=0 auid=0 ses=3227 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1463546701.084:9018348): pid=23771 uid=0 auid=0 ses=3227 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1463547076.444:9018349): pid=25053 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="sarnold" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1463547076.444:9018350): pid=25053 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="sarnold" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1463547076.468:9018351): pid=25050 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=pts/17 res=success'