Mar 11 08:46:28 sark kernel: [ 1079.440925] SGI XFS with ACLs, security attributes, realtime, large block/inode numbers, no debug enabled Mar 11 08:46:29 sark kernel: [ 1080.435125] type=1400 audit(1362987989.760:36): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=2982 comm="apparmor_parser" Mar 11 08:46:29 sark kernel: [ 1080.435201] type=1400 audit(1362987989.760:37): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=2982 comm="apparmor_parser" Mar 11 08:46:29 sark kernel: [ 1080.435245] type=1400 audit(1362987989.760:38): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=2982 comm="apparmor_parser" Mar 11 08:49:02 sark kernel: [ 1233.009347] type=1400 audit(1362988142.380:39): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince" pid=11127 comm="apparmor_parser" Mar 11 08:49:02 sark kernel: [ 1233.009913] type=1400 audit(1362988142.380:40): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince//sanitized_helper" pid=11127 comm="apparmor_parser" Mar 11 08:49:02 sark kernel: [ 1233.010548] type=1400 audit(1362988142.380:41): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince-previewer" pid=11127 comm="apparmor_parser" Mar 11 08:49:02 sark kernel: [ 1233.010956] type=1400 audit(1362988142.380:42): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince-previewer//sanitized_helper" pid=11127 comm="apparmor_parser" Mar 11 08:49:02 sark kernel: [ 1233.011385] type=1400 audit(1362988142.380:43): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince-thumbnailer" pid=11127 comm="apparmor_parser" Mar 11 08:49:02 sark kernel: [ 1233.011734] type=1400 audit(1362988142.380:44): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince-thumbnailer//sanitized_helper" pid=11127 comm="apparmor_parser" Mar 11 08:50:12 sark kernel: [ 1303.339679] type=1400 audit(1362988212.728:45): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/libvirtd" pid=19619 comm="apparmor_parser" Mar 11 08:50:12 sark kernel: [ 1303.354424] type=1400 audit(1362988212.744:46): apparmor="STATUS" operation="profile_replace" name="/usr/lib/libvirt/virt-aa-helper" pid=19621 comm="apparmor_parser" Mar 11 08:57:27 sark kernel: [ 0.000027] Security Framework initialized Mar 11 08:57:27 sark kernel: [ 0.000036] AppArmor: AppArmor initialized Mar 11 08:57:27 sark kernel: [ 0.702547] EVM: security.selinux Mar 11 08:57:27 sark kernel: [ 0.702549] EVM: security.SMACK64 Mar 11 08:57:27 sark kernel: [ 0.702550] EVM: security.capability Mar 11 08:57:27 sark kernel: [ 0.766223] AppArmor: AppArmor Filesystem Enabled Mar 11 08:57:27 sark kernel: [ 1.289422] type=2000 audit(1362988643.736:1): initialized Mar 11 08:57:27 sark kernel: [ 3.928360] type=1400 audit(1362988647.513:2): apparmor="STATUS" operation="profile_load" name="/sbin/dhclient" pid=704 comm="apparmor_parser" Mar 11 08:57:27 sark kernel: [ 3.928762] type=1400 audit(1362988647.513:3): apparmor="STATUS" operation="profile_load" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=704 comm="apparmor_parser" Mar 11 08:57:27 sark kernel: [ 3.928981] type=1400 audit(1362988647.513:4): apparmor="STATUS" operation="profile_load" name="/usr/lib/connman/scripts/dhclient-script" pid=704 comm="apparmor_parser" Mar 11 08:57:28 sark kernel: [ 4.462669] type=1400 audit(1362988648.049:5): apparmor="STATUS" operation="profile_load" name="/usr/lib/cups/backend/cups-pdf" pid=1308 comm="apparmor_parser" Mar 11 08:57:28 sark kernel: [ 4.463108] type=1400 audit(1362988648.049:6): apparmor="STATUS" operation="profile_load" name="/usr/sbin/cupsd" pid=1308 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.324368] type=1400 audit(1362988649.909:7): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=1696 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.324829] type=1400 audit(1362988649.913:8): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=1696 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.325033] type=1400 audit(1362988649.913:9): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=1696 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.327665] type=1400 audit(1362988649.913:10): apparmor="STATUS" operation="profile_load" name="/usr/lib/x86_64-linux-gnu/lightdm-remote-session-uccsconfigure/uccsconfigure-session-wrapper" pid=1694 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.327863] type=1400 audit(1362988649.913:11): apparmor="STATUS" operation="profile_load" name="/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper" pid=1692 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.327922] type=1400 audit(1362988649.913:12): apparmor="STATUS" operation="profile_load" name="/usr/lib/x86_64-linux-gnu/lightdm-remote-session-freerdp/freerdp-session-wrapper" pid=1693 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.328178] type=1400 audit(1362988649.913:13): apparmor="STATUS" operation="profile_load" name="/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser" pid=1692 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.328241] type=1400 audit(1362988649.913:14): apparmor="STATUS" operation="profile_load" name="/usr/lib/x86_64-linux-gnu/lightdm-remote-session-uccsconfigure/uccsconfigure-session-wrapper//chromium_browser" pid=1694 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.328248] type=1400 audit(1362988649.913:15): apparmor="STATUS" operation="profile_load" name="/usr/lib/x86_64-linux-gnu/lightdm-remote-session-freerdp/freerdp-session-wrapper//chromium_browser" pid=1693 comm="apparmor_parser" Mar 11 08:57:29 sark kernel: [ 6.329634] type=1400 audit(1362988649.917:16): apparmor="STATUS" operation="profile_load" name="/usr/bin/lxc-start" pid=1699 comm="apparmor_parser" Mar 12 08:49:06 sark kernel: [85877.889463] type=1400 audit(1363074546.546:36): apparmor="STATUS" operation="profile_replace" name="lxc-container-default" pid=10984 comm="apparmor_parser" Mar 12 08:49:06 sark kernel: [85877.889959] type=1400 audit(1363074546.546:37): apparmor="STATUS" operation="profile_replace" name="lxc-container-default-with-nesting" pid=10984 comm="apparmor_parser" Mar 12 08:49:06 sark kernel: [85877.935355] type=1400 audit(1363074546.590:38): apparmor="STATUS" operation="profile_replace" name="/usr/bin/lxc-start" pid=10986 comm="apparmor_parser" Mar 12 08:50:06 sark kernel: [85938.198975] SGI XFS with ACLs, security attributes, realtime, large block/inode numbers, no debug enabled Mar 13 21:30:08 sark kernel: [217899.971849] type=1400 audit(1363206608.230:39): apparmor="DENIED" operation="capable" parent=20370 profile="/usr/sbin/tcpdump" pid=20371 comm="tcpdump" pid=20371 comm="tcpdump" capability=12 capname="net_admin" Mar 15 08:14:49 sark kernel: [342943.334315] type=1400 audit(1363331689.105:40): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=3143 comm="apparmor_parser" Mar 15 08:14:49 sark kernel: [342943.334416] type=1400 audit(1363331689.105:41): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=3143 comm="apparmor_parser" Mar 15 08:14:49 sark kernel: [342943.334462] type=1400 audit(1363331689.105:42): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=3143 comm="apparmor_parser" Mar 15 11:19:50 sark kernel: [354041.772053] type=1400 audit(1363342790.869:43): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/libvirtd" pid=24613 comm="apparmor_parser" Mar 15 11:19:50 sark kernel: [354041.790845] type=1400 audit(1363342790.889:44): apparmor="STATUS" operation="profile_replace" name="/usr/lib/libvirt/virt-aa-helper" pid=24615 comm="apparmor_parser" Mar 15 15:21:49 sark kernel: [368573.329421] type=1400 audit(1363357309.252:45): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=14998 profile="lxc-container-default" name="/" pid=15007 comm="mount" flags="ro, remount" Mar 15 15:21:49 sark kernel: [368573.332419] type=1400 audit(1363357309.256:46): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=14998 profile="lxc-container-default" name="/" pid=15008 comm="mount" flags="ro, remount" Mar 15 15:21:49 sark kernel: [368573.339434] type=1400 audit(1363357309.264:47): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=14998 profile="lxc-container-default" name="/" pid=15009 comm="mount" flags="ro, remount" Mar 15 15:34:02 sark kernel: [369306.460891] type=1400 audit(1363358042.595:48): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=8924 profile="lxc-container-default" name="/" pid=8933 comm="mount" flags="ro, remount" Mar 15 15:34:02 sark kernel: [369306.463777] type=1400 audit(1363358042.599:49): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=8924 profile="lxc-container-default" name="/" pid=8934 comm="mount" flags="ro, remount" Mar 15 15:34:02 sark kernel: [369306.469951] type=1400 audit(1363358042.607:50): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=8924 profile="lxc-container-default" name="/" pid=8935 comm="mount" flags="ro, remount" Mar 15 15:43:37 sark kernel: [369880.802722] type=1400 audit(1363358617.068:51): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=18843 profile="lxc-container-default" name="/" pid=18852 comm="mount" flags="ro, remount" Mar 15 15:43:37 sark kernel: [369880.805552] type=1400 audit(1363358617.072:52): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=18843 profile="lxc-container-default" name="/" pid=18853 comm="mount" flags="ro, remount" Mar 15 15:43:37 sark kernel: [369880.811769] type=1400 audit(1363358617.080:53): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=18843 profile="lxc-container-default" name="/" pid=18854 comm="mount" flags="ro, remount" Mar 15 15:56:50 sark kernel: [370674.444845] type=1400 audit(1363359410.922:54): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=18943 profile="lxc-container-default" name="/" pid=18952 comm="mount" flags="ro, remount" Mar 15 15:56:50 sark kernel: [370674.447684] type=1400 audit(1363359410.922:55): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=18943 profile="lxc-container-default" name="/" pid=18953 comm="mount" flags="ro, remount" Mar 15 15:56:50 sark kernel: [370674.453929] type=1400 audit(1363359410.930:56): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 parent=18943 profile="lxc-container-default" name="/" pid=18954 comm="mount" flags="ro, remount"