Jul 18 08:00:58 cube kernel: [414121.677458] type=1400 audit(1310968858.288:26): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/ntpd" pid=16760 comm="apparmor_parser" Jul 18 08:00:59 cube kernel: [414122.463600] type=1400 audit(1310968859.078:27): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=16808 comm="apparmor_parser" Jul 18 08:00:59 cube kernel: [414122.463756] type=1400 audit(1310968859.078:28): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=16808 comm="apparmor_parser" Jul 18 08:00:59 cube kernel: [414122.463839] type=1400 audit(1310968859.078:29): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=16808 comm="apparmor_parser" Jul 18 08:01:05 cube kernel: [414129.130071] type=1400 audit(1310968865.749:30): apparmor="STATUS" operation="profile_replace" name="/usr/bin/freshclam" pid=17779 comm="apparmor_parser" Jul 18 08:01:08 cube kernel: [414131.704817] type=1400 audit(1310968868.319:31): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/clamd" pid=18432 comm="apparmor_parser" Jul 18 08:01:15 cube kernel: [414138.473596] type=1400 audit(1310968875.089:32): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18775 comm="apparmor_parser" Jul 18 08:01:15 cube kernel: [414138.473924] type=1400 audit(1310968875.089:33): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18775 comm="apparmor_parser" Jul 18 08:01:15 cube kernel: [414138.556080] type=1400 audit(1310968875.169:34): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18812 comm="apparmor_parser" Jul 18 08:01:15 cube kernel: [414138.556944] type=1400 audit(1310968875.169:35): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18812 comm="apparmor_parser" Jul 18 08:01:26 cube kernel: [414149.983235] type=1400 audit(1310968886.599:36): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince" pid=18876 comm="apparmor_parser" Jul 18 08:01:26 cube kernel: [414149.984708] type=1400 audit(1310968886.599:37): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince-previewer" pid=18876 comm="apparmor_parser" Jul 18 08:01:26 cube kernel: [414149.985654] type=1400 audit(1310968886.599:38): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince-thumbnailer" pid=18876 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414203.811355] type=1400 audit(1310968940.430:39): apparmor="STATUS" operation="profile_replace" name="/usr/share/gdm/guest-session/Xsession" pid=21062 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414203.935041] type=1400 audit(1310968940.550:40): apparmor="STATUS" operation="profile_replace" name="/usr/bin/freshclam" pid=21066 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414203.956333] type=1400 audit(1310968940.570:41): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/clamd" pid=21067 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414203.962941] type=1400 audit(1310968940.580:42): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=21063 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414203.963076] type=1400 audit(1310968940.580:43): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=21063 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414203.963158] type=1400 audit(1310968940.580:44): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=21063 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414204.129951] type=1400 audit(1310968940.740:45): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/mysqld" pid=21069 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414204.131689] type=1400 audit(1310968940.750:46): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/ntpd" pid=21070 comm="apparmor_parser" Jul 18 08:02:20 cube kernel: [414204.328507] type=1400 audit(1310968940.940:47): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/tcpdump" pid=21071 comm="apparmor_parser" Jul 18 08:02:21 cube kernel: [414204.408682] type=1400 audit(1310968941.020:48): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=21068 comm="apparmor_parser" Jul 18 08:02:25 cube kernel: [414209.030299] type=1400 audit(1310968945.650:60): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/ntpd" pid=21157 comm="apparmor_parser" Jul 18 08:02:25 cube kernel: [414209.103657] type=1400 audit(1310968945.720:61): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/tcpdump" pid=21158 comm="apparmor_parser" Jul 18 08:02:25 cube kernel: [414209.146949] type=1400 audit(1310968945.760:62): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=21155 comm="apparmor_parser" Jul 18 08:02:25 cube kernel: [414209.147289] type=1400 audit(1310968945.760:63): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=21155 comm="apparmor_parser" Jul 18 08:02:29 cube kernel: [414213.250680] type=1400 audit(1310968949.870:64): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince" pid=21151 comm="apparmor_parser" Jul 18 08:02:29 cube kernel: [414213.252155] type=1400 audit(1310968949.870:65): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince-previewer" pid=21151 comm="apparmor_parser" Jul 18 08:02:29 cube kernel: [414213.253055] type=1400 audit(1310968949.870:66): apparmor="STATUS" operation="profile_replace" name="/usr/bin/evince-thumbnailer" pid=21151 comm="apparmor_parser" Jul 18 08:15:55 cube kernel: [ 0.010035] Security Framework initialized Jul 18 08:15:55 cube kernel: [ 0.010051] AppArmor: AppArmor initialized Jul 18 08:15:55 cube kernel: [ 0.756282] AppArmor: AppArmor Filesystem Enabled Jul 18 08:15:55 cube kernel: [ 0.770360] type=2000 audit(1310969730.770:1): initialized Jul 18 08:15:55 cube kernel: [ 20.702800] type=1400 audit(1310969751.871:2): apparmor="STATUS" operation="profile_load" name="/sbin/dhclient" pid=618 comm="apparmor_parser" Jul 18 08:15:55 cube kernel: [ 20.702938] type=1400 audit(1310969751.871:3): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=619 comm="apparmor_parser" Jul 18 08:15:55 cube kernel: [ 20.703532] type=1400 audit(1310969751.871:4): apparmor="STATUS" operation="profile_load" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=618 comm="apparmor_parser" Jul 18 08:15:55 cube kernel: [ 20.703673] type=1400 audit(1310969751.871:5): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=619 comm="apparmor_parser" Jul 18 08:15:55 cube kernel: [ 20.704022] type=1400 audit(1310969751.871:6): apparmor="STATUS" operation="profile_load" name="/usr/lib/connman/scripts/dhclient-script" pid=618 comm="apparmor_parser" Jul 18 08:15:55 cube kernel: [ 20.704163] type=1400 audit(1310969751.871:7): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=619 comm="apparmor_parser" Jul 18 08:15:55 cube kernel: [ 22.021247] type=1400 audit(1310969753.191:8): apparmor="STATUS" operation="profile_load" name="/usr/sbin/ntpd" pid=754 comm="apparmor_parser" Jul 18 08:15:55 cube kernel: [ 22.029033] type=1400 audit(1310969753.191:9): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/ntpd" pid=753 comm="apparmor_parser" Jul 18 08:15:57 cube kernel: [ 26.647041] type=1400 audit(1310969757.811:10): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=983 comm="apparmor_parser" Jul 18 08:15:57 cube kernel: [ 26.647789] type=1400 audit(1310969757.811:11): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=983 comm="apparmor_parser" Jul 18 08:15:57 cube kernel: [ 26.648254] type=1400 audit(1310969757.811:12): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=983 comm="apparmor_parser" Jul 18 08:15:58 cube kernel: [ 27.398583] type=1400 audit(1310969758.561:13): apparmor="STATUS" operation="profile_load" name="/usr/bin/freshclam" pid=986 comm="apparmor_parser" Jul 18 08:15:58 cube kernel: [ 27.399574] type=1400 audit(1310969758.561:14): apparmor="STATUS" operation="profile_load" name="/usr/sbin/clamd" pid=987 comm="apparmor_parser" Jul 18 08:15:58 cube kernel: [ 27.613108] type=1400 audit(1310969758.781:15): apparmor="STATUS" operation="profile_load" name="/usr/lib/cups/backend/cups-pdf" pid=988 comm="apparmor_parser" Jul 18 08:15:58 cube kernel: [ 27.613964] type=1400 audit(1310969758.781:16): apparmor="STATUS" operation="profile_load" name="/usr/sbin/cupsd" pid=988 comm="apparmor_parser" Jul 18 08:15:58 cube kernel: [ 27.639544] type=1400 audit(1310969758.801:17): apparmor="STATUS" operation="profile_load" name="/usr/sbin/mysqld" pid=989 comm="apparmor_parser" Jul 18 08:15:58 cube kernel: [ 27.682005] type=1400 audit(1310969758.851:18): apparmor="STATUS" operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" pid=982 comm="apparmor_parser" Jul 18 08:15:58 cube kernel: [ 27.702045] type=1400 audit(1310969758.871:19): apparmor="STATUS" operation="profile_load" name="/usr/sbin/tcpdump" pid=991 comm="apparmor_parser" Jul 18 08:16:11 cube kernel: [ 40.602007] type=1400 audit(1310969771.771:26): apparmor="DENIED" operation="mknod" parent=1382 profile="/usr/sbin/mysqld" name="/run/mysqld/mysqld.sock" pid=1438 comm="mysqld" requested_mask="c" denied_mask="c" fsuid=113 ouid=113