Jan 31 23:39:58 lintukoto kernel: [ 0.010050] Security Framework initialized Jan 31 23:39:58 lintukoto kernel: [ 0.010082] AppArmor: AppArmor initialized Jan 31 23:39:58 lintukoto kernel: [ 0.492359] AppArmor: AppArmor Filesystem Enabled Jan 31 23:39:58 lintukoto kernel: [ 0.516505] type=2000 audit(1264973972.507:1): initialized Jan 31 23:39:58 lintukoto kernel: [ 25.397754] type=1505 audit(1264973998.220:2): operation="profile_load" pid=855 name="/sbin/dhclient3" Jan 31 23:39:58 lintukoto kernel: [ 25.398638] type=1505 audit(1264973998.220:3): operation="profile_load" pid=855 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Jan 31 23:39:58 lintukoto kernel: [ 25.399113] type=1505 audit(1264973998.220:4): operation="profile_load" pid=855 name="/usr/lib/connman/scripts/dhclient-script" Jan 31 23:39:58 lintukoto kernel: [ 25.449730] type=1505 audit(1264973998.270:5): operation="profile_load" pid=941 name="/usr/sbin/ntpd" Jan 31 23:39:59 lintukoto kernel: [ 26.194298] type=1505 audit(1264973999.020:6): operation="profile_load" pid=1288 name="/usr/share/gdm/guest-session/Xsession" Jan 31 23:39:59 lintukoto kernel: [ 26.196404] type=1505 audit(1264973999.020:7): operation="profile_replace" pid=1289 name="/sbin/dhclient3" Jan 31 23:39:59 lintukoto kernel: [ 26.197280] type=1505 audit(1264973999.020:8): operation="profile_replace" pid=1289 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Jan 31 23:39:59 lintukoto kernel: [ 26.197760] type=1505 audit(1264973999.020:9): operation="profile_replace" pid=1289 name="/usr/lib/connman/scripts/dhclient-script" Jan 31 23:39:59 lintukoto kernel: [ 26.201932] type=1505 audit(1264973999.030:10): operation="profile_load" pid=1290 name="/usr/bin/evince" Jan 31 23:39:59 lintukoto kernel: [ 26.216052] type=1505 audit(1264973999.040:11): operation="profile_load" pid=1290 name="/usr/bin/evince-previewer" Jan 31 23:40:03 lintukoto kernel: [ 30.841587] type=1503 audit(1264974003.670:17): operation="open" pid=1774 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Jan 31 23:40:18 lintukoto kernel: [ 44.774228] type=1503 audit(1264974018.517:18): operation="open" pid=2436 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 1 17:01:34 lintukoto kernel: [ 0.010050] Security Framework initialized Feb 1 17:01:34 lintukoto kernel: [ 0.010082] AppArmor: AppArmor initialized Feb 1 17:01:34 lintukoto kernel: [ 0.482355] AppArmor: AppArmor Filesystem Enabled Feb 1 17:01:34 lintukoto kernel: [ 0.506644] type=2000 audit(1265036468.499:1): initialized Feb 1 17:01:34 lintukoto kernel: [ 25.237176] type=1505 audit(1265036494.071:2): operation="profile_load" pid=812 name="/sbin/dhclient3" Feb 1 17:01:34 lintukoto kernel: [ 25.238051] type=1505 audit(1265036494.071:3): operation="profile_load" pid=812 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 1 17:01:34 lintukoto kernel: [ 25.238534] type=1505 audit(1265036494.071:4): operation="profile_load" pid=812 name="/usr/lib/connman/scripts/dhclient-script" Feb 1 17:01:34 lintukoto kernel: [ 25.276044] type=1505 audit(1265036494.111:5): operation="profile_load" pid=912 name="/usr/sbin/ntpd" Feb 1 17:01:34 lintukoto kernel: [ 25.968260] type=1505 audit(1265036494.801:6): operation="profile_load" pid=1243 name="/usr/share/gdm/guest-session/Xsession" Feb 1 17:01:34 lintukoto kernel: [ 25.970851] type=1505 audit(1265036494.811:7): operation="profile_replace" pid=1244 name="/sbin/dhclient3" Feb 1 17:01:34 lintukoto kernel: [ 25.971729] type=1505 audit(1265036494.811:8): operation="profile_replace" pid=1244 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 1 17:01:34 lintukoto kernel: [ 25.972209] type=1505 audit(1265036494.811:9): operation="profile_replace" pid=1244 name="/usr/lib/connman/scripts/dhclient-script" Feb 1 17:01:34 lintukoto kernel: [ 25.991699] type=1505 audit(1265036494.831:10): operation="profile_load" pid=1245 name="/usr/bin/evince" Feb 1 17:01:34 lintukoto kernel: [ 26.015995] type=1505 audit(1265036494.851:11): operation="profile_load" pid=1245 name="/usr/bin/evince-previewer" Feb 1 17:01:39 lintukoto kernel: [ 30.468672] type=1503 audit(1265036499.301:17): operation="open" pid=1738 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 1 17:05:36 lintukoto kernel: [ 269.695608] type=1503 audit(1265036736.835:18): operation="open" pid=2408 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 1 21:09:17 lintukoto kernel: [14890.591856] SGI XFS with ACLs, security attributes, realtime, large block/inode numbers, no debug enabled Feb 1 22:33:13 lintukoto kernel: [19926.180093] type=1503 audit(1265056393.325:19): operation="exec" pid=9883 parent=9877 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 1 22:33:13 lintukoto kernel: [19926.181933] type=1503 audit(1265056393.325:20): operation="exec" pid=9884 parent=9877 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 1 22:33:26 lintukoto kernel: [19939.809674] type=1503 audit(1265056406.945:21): operation="exec" pid=9896 parent=9877 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 1 22:33:26 lintukoto kernel: [19939.814533] type=1503 audit(1265056406.955:22): operation="exec" pid=9897 parent=9877 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 1 22:35:38 lintukoto kernel: [20071.162779] type=1503 audit(1265056538.305:23): operation="exec" pid=9935 parent=9931 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 1 22:35:38 lintukoto kernel: [20071.164079] type=1503 audit(1265056538.305:24): operation="exec" pid=9936 parent=9931 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 1 22:36:32 lintukoto kernel: [20125.287793] type=1503 audit(1265056592.427:25): operation="exec" pid=9978 parent=9976 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 1 22:36:32 lintukoto kernel: [20125.288969] type=1503 audit(1265056592.427:26): operation="exec" pid=9979 parent=9976 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 2 16:06:25 lintukoto kernel: [ 0.010051] Security Framework initialized Feb 2 16:06:25 lintukoto kernel: [ 0.010082] AppArmor: AppArmor initialized Feb 2 16:06:25 lintukoto kernel: [ 0.482335] AppArmor: AppArmor Filesystem Enabled Feb 2 16:06:25 lintukoto kernel: [ 0.506642] type=2000 audit(1265119576.499:1): initialized Feb 2 16:06:26 lintukoto kernel: [ 9.237264] type=1505 audit(1265119586.061:2): operation="profile_load" pid=876 name="/sbin/dhclient3" Feb 2 16:06:26 lintukoto kernel: [ 9.238131] type=1505 audit(1265119586.061:3): operation="profile_load" pid=876 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 2 16:06:26 lintukoto kernel: [ 9.238604] type=1505 audit(1265119586.061:4): operation="profile_load" pid=876 name="/usr/lib/connman/scripts/dhclient-script" Feb 2 16:06:26 lintukoto kernel: [ 9.544194] type=1505 audit(1265119586.371:5): operation="profile_load" pid=885 name="/usr/sbin/ntpd" Feb 2 16:06:31 lintukoto kernel: [ 15.057924] type=1505 audit(1265119591.881:6): operation="profile_load" pid=1215 name="/usr/share/gdm/guest-session/Xsession" Feb 2 16:06:31 lintukoto kernel: [ 15.060575] type=1505 audit(1265119591.891:7): operation="profile_replace" pid=1219 name="/sbin/dhclient3" Feb 2 16:06:31 lintukoto kernel: [ 15.061452] type=1505 audit(1265119591.891:8): operation="profile_replace" pid=1219 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 2 16:06:31 lintukoto kernel: [ 15.061934] type=1505 audit(1265119591.891:9): operation="profile_replace" pid=1219 name="/usr/lib/connman/scripts/dhclient-script" Feb 2 16:06:32 lintukoto kernel: [ 15.511098] type=1505 audit(1265119592.333:10): operation="profile_load" pid=1220 name="/usr/bin/evince" Feb 2 16:06:32 lintukoto kernel: [ 15.525315] type=1505 audit(1265119592.353:11): operation="profile_load" pid=1220 name="/usr/bin/evince-previewer" Feb 2 16:06:32 lintukoto kernel: [ 15.533623] type=1505 audit(1265119592.363:12): operation="profile_load" pid=1220 name="/usr/bin/evince-thumbnailer" Feb 2 16:06:32 lintukoto kernel: [ 15.637510] type=1505 audit(1265119592.463:13): operation="profile_load" pid=1226 name="/usr/lib/cups/backend/cups-pdf" Feb 2 16:06:32 lintukoto kernel: [ 15.638558] type=1505 audit(1265119592.463:14): operation="profile_load" pid=1226 name="/usr/sbin/cupsd" Feb 2 16:06:32 lintukoto kernel: [ 15.641930] type=1505 audit(1265119592.463:15): operation="profile_replace" pid=1229 name="/usr/sbin/ntpd" Feb 2 16:06:49 lintukoto kernel: [ 32.838242] type=1503 audit(1265119609.661:17): operation="open" pid=1838 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 2 16:07:37 lintukoto kernel: [ 81.748971] type=1503 audit(1265119657.885:18): operation="open" pid=2578 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 2 17:00:53 lintukoto kernel: [ 0.010050] Security Framework initialized Feb 2 17:00:53 lintukoto kernel: [ 0.010081] AppArmor: AppArmor initialized Feb 2 17:00:53 lintukoto kernel: [ 0.482353] AppArmor: AppArmor Filesystem Enabled Feb 2 17:00:53 lintukoto kernel: [ 0.506634] type=2000 audit(1265122827.499:1): initialized Feb 2 17:00:53 lintukoto kernel: [ 25.008673] type=1505 audit(1265122852.841:2): operation="profile_load" pid=835 name="/sbin/dhclient3" Feb 2 17:00:53 lintukoto kernel: [ 25.009539] type=1505 audit(1265122852.841:3): operation="profile_load" pid=835 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 2 17:00:53 lintukoto kernel: [ 25.010084] type=1505 audit(1265122852.851:4): operation="profile_load" pid=835 name="/usr/lib/connman/scripts/dhclient-script" Feb 2 17:00:53 lintukoto kernel: [ 25.064174] type=1505 audit(1265122852.901:5): operation="profile_load" pid=931 name="/usr/sbin/ntpd" Feb 2 17:00:53 lintukoto kernel: [ 25.712925] type=1505 audit(1265122853.551:6): operation="profile_load" pid=1261 name="/usr/share/gdm/guest-session/Xsession" Feb 2 17:00:53 lintukoto kernel: [ 25.716549] type=1505 audit(1265122853.551:7): operation="profile_replace" pid=1263 name="/sbin/dhclient3" Feb 2 17:00:53 lintukoto kernel: [ 25.717427] type=1505 audit(1265122853.551:8): operation="profile_replace" pid=1263 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 2 17:00:53 lintukoto kernel: [ 25.717908] type=1505 audit(1265122853.551:9): operation="profile_replace" pid=1263 name="/usr/lib/connman/scripts/dhclient-script" Feb 2 17:00:53 lintukoto kernel: [ 25.723948] type=1505 audit(1265122853.561:10): operation="profile_load" pid=1266 name="/usr/bin/evince" Feb 2 17:00:53 lintukoto kernel: [ 25.741785] type=1505 audit(1265122853.581:11): operation="profile_load" pid=1266 name="/usr/bin/evince-previewer" Feb 2 17:00:58 lintukoto kernel: [ 30.529651] type=1503 audit(1265122858.361:17): operation="open" pid=1756 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 2 17:01:18 lintukoto kernel: [ 51.012201] type=1503 audit(1265122878.851:18): operation="open" pid=2430 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 3 09:58:02 lintukoto kernel: [61047.030383] ata1.00: ACPI cmd f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out Feb 3 10:36:17 lintukoto kernel: [63343.522950] type=1503 audit(1265186177.778:19): operation="exec" pid=10578 parent=10574 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 10:36:17 lintukoto kernel: [63343.524997] type=1503 audit(1265186177.778:20): operation="exec" pid=10579 parent=10574 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 10:36:22 lintukoto kernel: [63347.874286] type=1503 audit(1265186182.128:21): operation="exec" pid=10598 parent=10574 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 10:36:22 lintukoto kernel: [63347.877865] type=1503 audit(1265186182.128:22): operation="exec" pid=10599 parent=10574 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 10:36:32 lintukoto kernel: [63358.589145] type=1503 audit(1265186192.838:23): operation="exec" pid=10600 parent=10574 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 10:36:32 lintukoto kernel: [63358.595073] type=1503 audit(1265186192.848:24): operation="exec" pid=10601 parent=10574 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 10:36:36 lintukoto kernel: [63362.213241] type=1503 audit(1265186196.466:25): operation="exec" pid=10602 parent=10574 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 10:36:36 lintukoto kernel: [63362.220218] type=1503 audit(1265186196.476:26): operation="exec" pid=10603 parent=10574 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 16:46:50 lintukoto kernel: [85576.631375] type=1503 audit(1265208410.878:27): operation="exec" pid=12070 parent=12066 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 16:46:50 lintukoto kernel: [85576.633041] type=1503 audit(1265208410.888:28): operation="exec" pid=12071 parent=12066 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 16:48:48 lintukoto kernel: [85693.878611] type=1503 audit(1265208528.126:29): operation="exec" pid=12083 parent=12066 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 16:48:48 lintukoto kernel: [85693.884805] type=1503 audit(1265208528.136:30): operation="exec" pid=12085 parent=12066 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 19:59:02 lintukoto kernel: [97108.635715] type=1503 audit(1265219942.886:31): operation="exec" pid=13096 parent=13092 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 19:59:02 lintukoto kernel: [97108.637324] type=1503 audit(1265219942.886:32): operation="exec" pid=13097 parent=13092 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 19:59:09 lintukoto kernel: [97115.085837] type=1503 audit(1265219949.336:33): operation="exec" pid=13114 parent=13092 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 19:59:09 lintukoto kernel: [97115.090703] type=1503 audit(1265219949.346:34): operation="exec" pid=13115 parent=13092 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 20:32:49 lintukoto kernel: [99134.832987] type=1503 audit(1265221969.086:35): operation="exec" pid=13263 parent=13259 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 20:32:49 lintukoto kernel: [99134.834820] type=1503 audit(1265221969.086:36): operation="exec" pid=13264 parent=13259 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 20:34:09 lintukoto kernel: [99215.038370] type=1503 audit(1265222049.286:37): operation="exec" pid=13299 parent=13259 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 3 20:34:09 lintukoto kernel: [99215.043698] type=1503 audit(1265222049.296:38): operation="exec" pid=13301 parent=13259 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 4 09:55:16 lintukoto kernel: [ 0.010050] Security Framework initialized Feb 4 09:55:16 lintukoto kernel: [ 0.010081] AppArmor: AppArmor initialized Feb 4 09:55:16 lintukoto kernel: [ 0.482334] AppArmor: AppArmor Filesystem Enabled Feb 4 09:55:16 lintukoto kernel: [ 0.506631] type=2000 audit(1265270102.499:1): initialized Feb 4 09:55:18 lintukoto kernel: [ 15.466137] type=1505 audit(1265270118.301:2): operation="profile_load" pid=915 name="/sbin/dhclient3" Feb 4 09:55:18 lintukoto kernel: [ 15.467000] type=1505 audit(1265270118.301:3): operation="profile_load" pid=915 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 4 09:55:18 lintukoto kernel: [ 15.467473] type=1505 audit(1265270118.301:4): operation="profile_load" pid=915 name="/usr/lib/connman/scripts/dhclient-script" Feb 4 09:55:18 lintukoto kernel: [ 15.717613] type=1505 audit(1265270118.551:5): operation="profile_load" pid=925 name="/usr/sbin/ntpd" Feb 4 09:55:25 lintukoto kernel: [ 22.308392] type=1505 audit(1265270125.141:6): operation="profile_load" pid=1263 name="/usr/share/gdm/guest-session/Xsession" Feb 4 09:55:25 lintukoto kernel: [ 22.310842] type=1505 audit(1265270125.151:7): operation="profile_replace" pid=1264 name="/sbin/dhclient3" Feb 4 09:55:25 lintukoto kernel: [ 22.311732] type=1505 audit(1265270125.151:8): operation="profile_replace" pid=1264 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 4 09:55:25 lintukoto kernel: [ 22.312212] type=1505 audit(1265270125.151:9): operation="profile_replace" pid=1264 name="/usr/lib/connman/scripts/dhclient-script" Feb 4 09:55:25 lintukoto kernel: [ 22.606163] type=1505 audit(1265270125.444:10): operation="profile_load" pid=1265 name="/usr/bin/evince" Feb 4 09:55:25 lintukoto kernel: [ 22.622576] type=1505 audit(1265270125.461:11): operation="profile_load" pid=1265 name="/usr/bin/evince-previewer" Feb 4 09:55:25 lintukoto kernel: [ 22.631644] type=1505 audit(1265270125.471:12): operation="profile_load" pid=1265 name="/usr/bin/evince-thumbnailer" Feb 4 09:55:25 lintukoto kernel: [ 22.688100] type=1505 audit(1265270125.521:13): operation="profile_load" pid=1268 name="/usr/lib/cups/backend/cups-pdf" Feb 4 09:55:25 lintukoto kernel: [ 22.689155] type=1505 audit(1265270125.521:14): operation="profile_load" pid=1268 name="/usr/sbin/cupsd" Feb 4 09:55:25 lintukoto kernel: [ 22.692554] type=1505 audit(1265270125.531:15): operation="profile_replace" pid=1269 name="/usr/sbin/ntpd" Feb 4 09:55:43 lintukoto kernel: [ 41.003162] type=1503 audit(1265270143.841:17): operation="open" pid=1801 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 4 09:56:17 lintukoto kernel: [ 72.091550] type=1503 audit(1265270177.353:18): operation="open" pid=2442 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 4 17:35:31 lintukoto kernel: [27626.428409] SGI XFS with ACLs, security attributes, realtime, large block/inode numbers, no debug enabled Feb 4 17:35:43 lintukoto kernel: [27638.065865] type=1505 audit(1265297743.333:19): operation="profile_replace" pid=12303 name="/usr/sbin/ntpd" Feb 4 17:35:43 lintukoto kernel: [27638.425682] type=1503 audit(1265297743.690:20): operation="open" pid=12337 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 09:21:25 lintukoto kernel: [ 0.010049] Security Framework initialized Feb 5 09:21:25 lintukoto kernel: [ 0.010080] AppArmor: AppArmor initialized Feb 5 09:21:25 lintukoto kernel: [ 0.482331] AppArmor: AppArmor Filesystem Enabled Feb 5 09:21:25 lintukoto kernel: [ 0.506214] type=2000 audit(1265354478.499:1): initialized Feb 5 09:21:26 lintukoto kernel: [ 7.381059] type=1505 audit(1265354486.222:2): operation="profile_load" pid=793 name="/sbin/dhclient3" Feb 5 09:21:26 lintukoto kernel: [ 7.381927] type=1505 audit(1265354486.222:3): operation="profile_load" pid=793 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 5 09:21:26 lintukoto kernel: [ 7.382401] type=1505 audit(1265354486.222:4): operation="profile_load" pid=793 name="/usr/lib/connman/scripts/dhclient-script" Feb 5 09:21:26 lintukoto kernel: [ 7.910134] type=1505 audit(1265354486.752:5): operation="profile_load" pid=804 name="/usr/sbin/ntpd" Feb 5 09:21:35 lintukoto kernel: [ 16.777275] type=1505 audit(1265354495.612:6): operation="profile_load" pid=1222 name="/usr/share/gdm/guest-session/Xsession" Feb 5 09:21:35 lintukoto kernel: [ 16.780423] type=1505 audit(1265354495.622:7): operation="profile_replace" pid=1224 name="/sbin/dhclient3" Feb 5 09:21:35 lintukoto kernel: [ 16.781618] type=1505 audit(1265354495.622:8): operation="profile_replace" pid=1224 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 5 09:21:35 lintukoto kernel: [ 16.782212] type=1505 audit(1265354495.622:9): operation="profile_replace" pid=1224 name="/usr/lib/connman/scripts/dhclient-script" Feb 5 09:21:35 lintukoto kernel: [ 16.986276] type=1505 audit(1265354495.824:10): operation="profile_load" pid=1227 name="/usr/bin/evince" Feb 5 09:21:35 lintukoto kernel: [ 17.003134] type=1505 audit(1265354495.842:11): operation="profile_load" pid=1227 name="/usr/bin/evince-previewer" Feb 5 09:21:35 lintukoto kernel: [ 17.013616] type=1505 audit(1265354495.852:12): operation="profile_load" pid=1227 name="/usr/bin/evince-thumbnailer" Feb 5 09:21:35 lintukoto kernel: [ 17.090387] type=1505 audit(1265354495.932:13): operation="profile_load" pid=1232 name="/usr/lib/cups/backend/cups-pdf" Feb 5 09:21:35 lintukoto kernel: [ 17.091435] type=1505 audit(1265354495.932:14): operation="profile_load" pid=1232 name="/usr/sbin/cupsd" Feb 5 09:21:35 lintukoto kernel: [ 17.094590] type=1505 audit(1265354495.932:15): operation="profile_replace" pid=1233 name="/usr/sbin/ntpd" Feb 5 09:21:52 lintukoto kernel: [ 34.064900] type=1503 audit(1265354512.902:17): operation="open" pid=1677 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 09:23:11 lintukoto kernel: [ 112.744402] type=1503 audit(1265354591.582:18): operation="open" pid=2345 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 11:38:34 lintukoto kernel: [ 8235.939699] type=1503 audit(1265362714.772:19): operation="exec" pid=5042 parent=5038 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 5 11:38:34 lintukoto kernel: [ 8235.941636] type=1503 audit(1265362714.782:20): operation="exec" pid=5043 parent=5038 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/dash" Feb 5 17:16:48 lintukoto kernel: [28529.631883] SGI XFS with ACLs, security attributes, realtime, large block/inode numbers, no debug enabled Feb 5 18:34:11 lintukoto kernel: [33173.146350] type=1503 audit(1265387651.984:21): operation="open" pid=15607 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 18:39:48 lintukoto kernel: [33509.262417] type=1503 audit(1265387988.102:22): operation="open" pid=15713 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 18:42:02 lintukoto kernel: [33643.963346] type=1503 audit(1265388122.802:23): operation="open" pid=15777 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 18:43:08 lintukoto kernel: [33709.678156] type=1503 audit(1265388188.512:24): operation="open" pid=15814 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 18:43:59 lintukoto kernel: [33760.996533] type=1503 audit(1265388239.834:25): operation="open" pid=15851 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 18:45:25 lintukoto kernel: [33847.034988] type=1503 audit(1265388325.872:26): operation="open" pid=15947 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 18:46:48 lintukoto kernel: [33929.556029] type=1503 audit(1265388408.392:27): operation="open" pid=15999 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 18:59:39 lintukoto kernel: [34700.980051] type=1503 audit(1265389179.822:28): operation="open" pid=16180 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 18:59:59 lintukoto kernel: [34721.020341] type=1503 audit(1265389199.854:29): operation="open" pid=16186 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 19:01:42 lintukoto kernel: [34823.519907] type=1503 audit(1265389302.352:30): operation="open" pid=16209 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/broken" Feb 5 19:01:58 lintukoto kernel: [34840.017936] type=1503 audit(1265389318.852:31): operation="capable" pid=16219 parent=1 profile="/usr/sbin/ntpd" name="dac_override" Feb 5 19:01:58 lintukoto kernel: [34840.017951] type=1503 audit(1265389318.852:32): operation="capable" pid=16219 parent=1 profile="/usr/sbin/ntpd" name="dac_read_search" Feb 5 19:02:23 lintukoto kernel: [34864.870836] type=1503 audit(1265389343.712:33): operation="capable" pid=16236 parent=1 profile="/usr/sbin/ntpd" name="dac_override" Feb 5 19:02:59 lintukoto kernel: [34901.138156] type=1503 audit(1265389379.972:34): operation="capable" pid=16252 parent=1 profile="/usr/sbin/ntpd" name="dac_override" Feb 5 19:03:27 lintukoto kernel: [34928.645102] type=1503 audit(1265389407.484:35): operation="capable" pid=16264 parent=1 profile="/usr/sbin/ntpd" name="dac_override" Feb 5 19:03:39 lintukoto kernel: [34940.537685] type=1503 audit(1265389419.372:36): operation="open" pid=16273 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 19:04:14 lintukoto kernel: [34975.241005] type=1503 audit(1265389454.082:37): operation="open" pid=16287 parent=1 profile="/usr/sbin/ntpd" requested_mask="::r" denied_mask="::r" fsuid=0 ouid=122 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 19:05:17 lintukoto kernel: [35038.150737] type=1503 audit(1265389516.982:38): operation="open" pid=16310 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ORG" Feb 5 19:06:16 lintukoto kernel: [35098.001207] type=1503 audit(1265389576.834:39): operation="open" pid=16326 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 19:06:33 lintukoto kernel: [35114.704927] type=1503 audit(1265389593.544:40): operation="open" pid=16333 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 19:13:24 lintukoto kernel: [35525.202325] type=1503 audit(1265390004.042:41): operation="open" pid=16415 parent=1 profile="/usr/sbin/ntpd" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/var/lib/ntp/ntp.conf.dhcp" Feb 5 19:14:08 lintukoto kernel: [35569.945404] type=1505 audit(1265390048.784:42): operation="profile_replace" pid=16468 name="/usr/share/gdm/guest-session/Xsession" Feb 5 19:14:08 lintukoto kernel: [35570.130622] type=1505 audit(1265390048.972:43): operation="profile_replace" pid=16469 name="/sbin/dhclient3" Feb 5 19:14:08 lintukoto kernel: [35570.130771] type=1505 audit(1265390048.972:44): operation="profile_replace" pid=16469 name="/usr/lib/NetworkManager/nm-dhcp-client.action" Feb 5 19:14:08 lintukoto kernel: [35570.130866] type=1505 audit(1265390048.972:45): operation="profile_replace" pid=16469 name="/usr/lib/connman/scripts/dhclient-script" Feb 5 19:14:19 lintukoto kernel: [35580.793969] type=1505 audit(1265390059.634:46): operation="profile_replace" pid=16470 name="/usr/bin/evince" Feb 5 19:14:19 lintukoto kernel: [35580.795675] type=1505 audit(1265390059.634:47): operation="profile_replace" pid=16470 name="/usr/bin/evince-previewer" Feb 5 19:14:19 lintukoto kernel: [35580.796954] type=1505 audit(1265390059.634:48): operation="profile_replace" pid=16470 name="/usr/bin/evince-thumbnailer" Feb 5 19:14:19 lintukoto kernel: [35581.091235] type=1505 audit(1265390059.924:49): operation="profile_replace" pid=16473 name="/usr/lib/cups/backend/cups-pdf" Feb 5 19:14:19 lintukoto kernel: [35581.091850] type=1505 audit(1265390059.924:50): operation="profile_replace" pid=16473 name="/usr/sbin/cupsd" Feb 5 19:14:20 lintukoto kernel: [35581.170947] type=1505 audit(1265390060.004:51): operation="profile_replace" pid=16474 name="/usr/sbin/ntpd" Feb 5 19:14:20 lintukoto kernel: [35581.265010] type=1505 audit(1265390060.104:52): operation="profile_replace" pid=16475 name="/usr/sbin/tcpdump"