USER        PID ACCESS COMMAND
/dev/snd/controlC1:  gdm         982 F.... pulseaudio
                     botnet     1357 F.... pulseaudio
/dev/snd/pcmC0D0c:   botnet     1357 F...m pulseaudio
/dev/snd/pcmC0D0p:   botnet     1357 F...m pulseaudio
/dev/snd/controlC0:  gdm         982 F.... pulseaudio
                     botnet     1357 F.... pulseaudio