May  3 18:06:23 canopus kernel: [    0.004029] Security Framework initialized
May  3 18:06:23 canopus kernel: [    0.004051] AppArmor: AppArmor initialized
May  3 18:06:23 canopus kernel: [    1.402905] AppArmor: AppArmor Filesystem Enabled
May  3 18:06:23 canopus kernel: [    1.488306] type=2000 audit(1272866776.488:1): initialized
May  3 18:06:23 canopus kernel: [    6.141452] type=1505 audit(1272866781.012:2):  operation="profile_load" pid=469 name="/sbin/dhclient3"
May  3 18:06:23 canopus kernel: [    6.142189] type=1505 audit(1272866781.012:3):  operation="profile_load" pid=469 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
May  3 18:06:23 canopus kernel: [    6.142586] type=1505 audit(1272866781.012:4):  operation="profile_load" pid=469 name="/usr/lib/connman/scripts/dhclient-script"
May  3 18:06:27 canopus kernel: [   12.840387] type=1505 audit(1272866787.711:5):  operation="profile_load" pid=1108 name="/usr/share/gdm/guest-session/Xsession"
May  3 18:06:27 canopus kernel: [   12.842914] type=1505 audit(1272866787.711:6):  operation="profile_replace" pid=1109 name="/sbin/dhclient3"
May  3 18:06:27 canopus kernel: [   12.843662] type=1505 audit(1272866787.711:7):  operation="profile_replace" pid=1109 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
May  3 18:06:27 canopus kernel: [   12.844066] type=1505 audit(1272866787.715:8):  operation="profile_replace" pid=1109 name="/usr/lib/connman/scripts/dhclient-script"
May  3 18:06:27 canopus kernel: [   12.930975] type=1505 audit(1272866787.801:9):  operation="profile_load" pid=1110 name="/usr/bin/evince"
May  3 18:06:27 canopus kernel: [   12.943764] type=1505 audit(1272866787.811:10):  operation="profile_load" pid=1110 name="/usr/bin/evince-previewer"
May  3 18:06:27 canopus kernel: [   12.949524] type=1505 audit(1272866787.819:11):  operation="profile_load" pid=1110 name="/usr/bin/evince-thumbnailer"
May  3 18:06:28 canopus kernel: [   13.149844] type=1505 audit(1272866788.020:12):  operation="profile_load" pid=1112 name="/usr/lib/cups/backend/cups-pdf"
May  3 18:06:28 canopus kernel: [   13.150712] type=1505 audit(1272866788.020:13):  operation="profile_load" pid=1112 name="/usr/sbin/cupsd"
May  3 18:06:28 canopus kernel: [   13.167070] type=1505 audit(1272866788.035:14):  operation="profile_load" pid=1116 name="/usr/sbin/tcpdump"
May  3 18:07:52 canopus kernel: [   97.735221] type=1505 audit(1272866872.603:15):  operation="profile_load" pid=2137 name="/usr/sbin/ntpd"
May  3 18:45:34 canopus kernel: [    0.004028] Security Framework initialized
May  3 18:45:34 canopus kernel: [    0.004051] AppArmor: AppArmor initialized
May  3 18:45:34 canopus kernel: [    1.402894] AppArmor: AppArmor Filesystem Enabled
May  3 18:45:34 canopus kernel: [    1.488305] type=2000 audit(1272869127.488:1): initialized
May  3 18:45:34 canopus kernel: [    6.391817] type=1505 audit(1272869133.259:2):  operation="profile_load" pid=499 name="/sbin/dhclient3"
May  3 18:45:34 canopus kernel: [    6.392990] type=1505 audit(1272869133.263:3):  operation="profile_load" pid=499 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
May  3 18:45:34 canopus kernel: [    6.393388] type=1505 audit(1272869133.263:4):  operation="profile_load" pid=499 name="/usr/lib/connman/scripts/dhclient-script"
May  3 18:45:34 canopus kernel: [    7.048363] type=1505 audit(1272869133.919:5):  operation="profile_load" pid=575 name="/usr/sbin/ntpd"
May  3 18:45:41 canopus kernel: [   14.394641] type=1505 audit(1272869141.265:6):  operation="profile_load" pid=881 name="/usr/share/gdm/guest-session/Xsession"
May  3 18:45:41 canopus kernel: [   14.397302] type=1505 audit(1272869141.267:7):  operation="profile_replace" pid=882 name="/sbin/dhclient3"
May  3 18:45:41 canopus kernel: [   14.398050] type=1505 audit(1272869141.267:8):  operation="profile_replace" pid=882 name="/usr/lib/NetworkManager/nm-dhcp-client.action"
May  3 18:45:41 canopus kernel: [   14.398453] type=1505 audit(1272869141.267:9):  operation="profile_replace" pid=882 name="/usr/lib/connman/scripts/dhclient-script"
May  3 18:45:41 canopus kernel: [   14.485259] type=1505 audit(1272869141.355:10):  operation="profile_load" pid=883 name="/usr/bin/evince"
May  3 18:45:41 canopus kernel: [   14.494669] type=1505 audit(1272869141.363:11):  operation="profile_load" pid=883 name="/usr/bin/evince-previewer"
May  3 18:45:41 canopus kernel: [   14.500436] type=1505 audit(1272869141.371:12):  operation="profile_load" pid=883 name="/usr/bin/evince-thumbnailer"
May  3 18:45:41 canopus kernel: [   14.778245] type=1505 audit(1272869141.647:13):  operation="profile_load" pid=885 name="/usr/lib/cups/backend/cups-pdf"
May  3 18:45:41 canopus kernel: [   14.779115] type=1505 audit(1272869141.647:14):  operation="profile_load" pid=885 name="/usr/sbin/cupsd"
May  3 18:45:47 canopus kernel: [   20.651117] type=1503 audit(1272869147.519:17):  operation="mknod" pid=995 parent=1 profile="/usr/sbin/ntpd" requested_mask="c::" denied_mask="c::" fsuid=115 ouid=115 name="/var/log/ntpstats/sysstats.2010w17"
May  3 19:45:48 canopus kernel: [ 3622.162287] type=1503 audit(1272872748.846:18):  operation="mknod" pid=1237 parent=1 profile="/usr/sbin/ntpd" requested_mask="c::" denied_mask="c::" fsuid=115 ouid=115 name="/var/log/ntpstats/sysstats.2010w17"
May  3 20:45:48 canopus kernel: [ 7222.162272] type=1503 audit(1272876348.847:19):  operation="mknod" pid=1237 parent=1 profile="/usr/sbin/ntpd" requested_mask="c::" denied_mask="c::" fsuid=115 ouid=115 name="/var/log/ntpstats/sysstats.2010w17"