Attachment 355652 Details for Bug 598193

ausearch output

audit.log (text/x-log), 3.66 MB, created by Arvin Schnell on 2010-04-20 16:56:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Arvin Schnell

Created: 2010-04-20 16:56:49 UTC

Size: 3.66 MB

patch

obsolete

>----
>type=PATH msg=audit(04/20/10 11:54:57.637:14) : item=0 name=/dev/pts/3 inode=6 dev=00:0b mode=character,620 ouid=linux ogid=tty rdev=88:03 
>type=CWD msg=audit(04/20/10 11:54:57.637:14) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.637:14) : arch=i386 syscall=open success=yes exit=22 a0=83a3430 a1=2 a2=16 a3=15 items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=gnome-terminal exe=/usr/bin/gnome-terminal key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.376:13) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.376:13) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.376:13) : arch=i386 syscall=open success=yes exit=23 a0=b6c673e0 a1=8000 a2=0 a3=0 items=1 ppid=1 pid=4049 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=(none) ses=1 comm=main-menu exe=/usr/lib/gnome-main-menu/main-menu key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.677:15) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:54:57.677:15) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.677:15) : arch=i386 syscall=open success=yes exit=3 a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.757:16) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.757:16) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.757:16) : arch=i386 syscall=open success=yes exit=3 a0=8103f88 a1=8241 a2=1b6 a3=0 items=1 ppid=4052 pid=4059 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.761:17) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.761:17) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.761:17) : arch=i386 syscall=open success=yes exit=3 a0=81040b8 a1=8241 a2=1b6 a3=0 items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.761:18) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.761:18) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.761:18) : arch=i386 syscall=open success=yes exit=3 a0=8108560 a1=8241 a2=1b6 a3=a items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.765:19) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.765:19) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.765:19) : arch=i386 syscall=open success=yes exit=3 a0=8108a48 a1=8241 a2=1b6 a3=a items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.765:20) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.765:20) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.765:20) : arch=i386 syscall=open success=yes exit=3 a0=8108230 a1=8241 a2=1b6 a3=a items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.769:21) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.769:21) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.769:21) : arch=i386 syscall=open success=yes exit=3 a0=8108da0 a1=8241 a2=1b6 a3=a items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.769:22) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.769:22) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.769:22) : arch=i386 syscall=open success=yes exit=3 a0=81126a0 a1=8241 a2=1b6 a3=a items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.769:23) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:54:57.769:23) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.769:23) : arch=i386 syscall=open success=yes exit=3 a0=810a670 a1=8241 a2=1b6 a3=a items=1 ppid=3538 pid=4052 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:54:57.789:24) : item=0 name=/dev/pts/3 inode=6 dev=00:0b mode=character,620 ouid=linux ogid=tty rdev=88:03 
>type=CWD msg=audit(04/20/10 11:54:57.789:24) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:54:57.789:24) : arch=i386 syscall=open success=yes exit=3 a0=8105060 a1=8241 a2=1b6 a3=0 items=1 ppid=4052 pid=4060 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:03.037:25) : item=0 name=/dev/pts/3 inode=6 dev=00:0b mode=character,620 ouid=linux ogid=tty rdev=88:03 
>type=CWD msg=audit(04/20/10 11:55:03.037:25) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:03.037:25) : arch=i386 syscall=open success=yes exit=3 a0=80ffda8 a1=8241 a2=1b6 a3=0 items=1 ppid=4052 pid=4064 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.352:30) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:06.352:30) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.352:30) : arch=i386 syscall=open success=yes exit=3 a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4066 pid=4072 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.384:31) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.384:31) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.384:31) : arch=i386 syscall=open success=yes exit=3 a0=80f2058 a1=8241 a2=1b6 a3=0 items=1 ppid=4072 pid=4075 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.401:32) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.401:32) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.401:32) : arch=i386 syscall=open success=yes exit=3 a0=80f1c68 a1=8241 a2=1b6 a3=0 items=1 ppid=4077 pid=4078 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.413:33) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.413:33) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.413:33) : arch=i386 syscall=open success=yes exit=3 a0=80e4020 a1=8241 a2=1b6 a3=0 items=1 ppid=4079 pid=4080 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.509:34) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.509:34) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.509:34) : arch=i386 syscall=open success=yes exit=3 a0=8100688 a1=8241 a2=1b6 a3=0 items=1 ppid=4091 pid=4092 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.601:35) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.601:35) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.601:35) : arch=i386 syscall=open success=yes exit=3 a0=810bd88 a1=8241 a2=1b6 a3=0 items=1 ppid=4072 pid=4103 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.605:36) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.605:36) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.605:36) : arch=i386 syscall=open success=yes exit=3 a0=80ff260 a1=8241 a2=1b6 a3=0 items=1 ppid=4072 pid=4104 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.621:37) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.621:37) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.621:37) : arch=i386 syscall=open success=yes exit=3 a0=810cfc8 a1=8241 a2=1b6 a3=0 items=1 ppid=4072 pid=4104 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.633:38) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.633:38) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.633:38) : arch=i386 syscall=open success=yes exit=3 a0=810cc00 a1=8241 a2=1b6 a3=0 items=1 ppid=4072 pid=4107 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.645:39) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.645:39) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.645:39) : arch=i386 syscall=open success=yes exit=3 a0=810c7f0 a1=8241 a2=1b6 a3=0 items=1 ppid=4066 pid=4072 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.649:40) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.649:40) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.649:40) : arch=i386 syscall=open success=yes exit=3 a0=8110218 a1=8241 a2=1b6 a3=a items=1 ppid=4066 pid=4072 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.649:41) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.649:41) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.649:41) : arch=i386 syscall=open success=yes exit=3 a0=81105b8 a1=8241 a2=1b6 a3=a items=1 ppid=4066 pid=4072 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.649:42) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.649:42) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.649:42) : arch=i386 syscall=open success=yes exit=3 a0=8110650 a1=8241 a2=1b6 a3=a items=1 ppid=4066 pid=4072 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.653:43) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.653:43) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.653:43) : arch=i386 syscall=open success=yes exit=3 a0=8111dd0 a1=8241 a2=1b6 a3=a items=1 ppid=4066 pid=4072 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.653:44) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.653:44) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.653:44) : arch=i386 syscall=open success=yes exit=3 a0=81193a0 a1=8241 a2=1b6 a3=a items=1 ppid=4066 pid=4072 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:06.653:45) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:06.653:45) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:55:06.653:45) : arch=i386 syscall=open success=yes exit=3 a0=8112920 a1=8241 a2=1b6 a3=a items=1 ppid=4066 pid=4072 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:39.749:49) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:39.749:49) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:39.749:49) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4114 pid=4115 auid=linux uid=linux gid=users euid=root suid=root fsuid=root egid=users sgid=users fsgid=users tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:39.913:50) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:39.913:50) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:39.913:50) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4114 pid=4116 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:39.917:51) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:39.917:51) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:39.917:51) : arch=i386 syscall=open success=yes exit=3 a0=80ec318 a1=8241 a2=1b6 a3=0 items=1 ppid=4116 pid=4117 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:39.408:46) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:39.408:46) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:39.408:46) : arch=i386 syscall=open success=yes exit=29 a0=b6f8b3e0 a1=8000 a2=0 a3=0 items=1 ppid=1 pid=4113 auid=linux uid=linux gid=users euid=linux suid=linux fsuid=linux egid=users sgid=users fsgid=users tty=(none) ses=1 comm=nautilus exe=/usr/bin/nautilus key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:42.236:61) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:42.236:61) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:42.236:61) : arch=i386 syscall=open success=yes exit=3 a0=80e9c40 a1=8241 a2=1b6 a3=0 items=1 ppid=4120 pid=4141 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ldd exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:40.049:54) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:40.049:54) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:40.049:54) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4114 pid=4120 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=yast2 exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:40.321:55) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:40.321:55) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:40.321:55) : arch=i386 syscall=open success=yes exit=3 a0=8069430 a1=98800 a2=0 a3=8069430 items=1 ppid=4128 pid=4129 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ls exe=/bin/ls key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:40.341:56) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:40.341:56) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:40.341:56) : arch=i386 syscall=open success=yes exit=3 a0=804dfcf a1=8000 a2=1b6 a3=8054380 items=1 ppid=4120 pid=4131 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mktemp exe=/bin/mktemp key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:40.405:57) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:40.405:57) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:40.405:57) : arch=i386 syscall=open success=yes exit=3 a0=80f9c48 a1=8241 a2=1b6 a3=0 items=1 ppid=4134 pid=4136 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=yast2 exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:40.512:58) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:40.512:58) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:40.512:58) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4134 pid=4135 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ldd exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:40.520:59) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:40.520:59) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:40.520:59) : arch=i386 syscall=open success=yes exit=3 a0=80f03d0 a1=8241 a2=1b6 a3=0 items=1 ppid=4134 pid=4135 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ldd exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:42.228:60) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:42.228:60) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:42.228:60) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4120 pid=4141 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ldd exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:46.453:63) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:46.453:63) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:46.453:63) : arch=i386 syscall=open success=yes exit=12 a0=824e814 a1=8000 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:46.453:62) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:46.453:62) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:46.453:62) : arch=i386 syscall=open success=yes exit=12 a0=b6e2fb63 a1=8000 a2=0 a3=8229060 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.528:65) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:50.528:65) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.528:65) : arch=i386 syscall=open success=yes exit=3 a0=80ec828 a1=8241 a2=1b6 a3=0 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.601:66) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.601:66) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.601:66) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.480:64) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:50.480:64) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.480:64) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4149 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.601:67) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.601:67) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.601:67) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.601:68) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.601:68) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.601:68) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.605:69) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.605:69) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.605:69) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.605:70) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.605:70) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.605:70) : arch=i386 syscall=readlink success=yes exit=22 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.605:71) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.605:71) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.605:71) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.605:72) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.605:72) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.605:72) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.609:73) : item=0 name=/dev/.udev/db/block:sda inode=6819 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.609:73) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.609:73) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.609:74) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.609:74) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.609:74) : arch=i386 syscall=readlink success=yes exit=22 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.609:75) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.609:75) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.609:75) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.609:76) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.609:76) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.609:76) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.609:77) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.609:77) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.609:77) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.613:78) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.613:78) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.613:78) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.613:79) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.613:79) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.613:79) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.613:80) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.613:80) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.613:80) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.613:81) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.613:81) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.613:81) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.613:82) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.613:82) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.613:82) : arch=i386 syscall=readlink success=yes exit=19 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.617:83) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.617:83) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.617:83) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.617:84) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.617:84) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.617:84) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.617:85) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.617:85) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.617:85) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.617:86) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.617:86) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.617:86) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.617:87) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.617:87) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.617:87) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.617:88) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.617:88) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.617:88) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.617:89) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.617:89) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.617:89) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.617:90) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.617:90) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.617:90) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:91) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:91) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:91) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:92) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:92) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:92) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:93) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:93) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:93) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:94) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:94) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:94) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:95) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:95) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:95) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:96) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:96) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:96) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:97) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:97) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:97) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:98) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:98) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:98) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:99) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:99) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:99) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:100) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:100) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:100) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.620:101) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.620:101) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.620:101) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:102) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:102) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:102) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:103) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:103) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:103) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:104) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:104) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:104) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:105) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:105) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:105) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:106) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:106) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:106) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:107) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:107) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:107) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:108) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:108) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:108) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:109) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:109) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:109) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:110) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:110) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:110) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:111) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:111) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:111) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:112) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:112) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:112) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:113) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:113) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:113) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:114) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:114) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:114) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:115) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:115) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:115) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:116) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:116) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:116) : arch=i386 syscall=readlink success=yes exit=21 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:117) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:117) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:117) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:118) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:118) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:118) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:119) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:119) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:119) : arch=i386 syscall=readlink success=yes exit=14 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:120) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:120) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:120) : arch=i386 syscall=readlink success=yes exit=12 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:121) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:121) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:121) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:122) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:122) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:122) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:123) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:123) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:123) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:124) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:124) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:124) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:125) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:125) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:125) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:126) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:126) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:126) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:127) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:127) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:127) : arch=i386 syscall=readlink success=yes exit=26 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.624:128) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.624:128) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.624:128) : arch=i386 syscall=readlink success=yes exit=25 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:129) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:129) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:129) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:130) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:130) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:130) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:131) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:131) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:131) : arch=i386 syscall=readlink success=yes exit=18 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:132) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:132) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:132) : arch=i386 syscall=readlink success=yes exit=26 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:133) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:133) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:133) : arch=i386 syscall=readlink success=yes exit=29 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:134) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:134) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:134) : arch=i386 syscall=readlink success=yes exit=17 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:135) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:135) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:135) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:136) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:136) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:136) : arch=i386 syscall=readlink success=yes exit=20 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:137) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:137) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:137) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:138) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:138) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:138) : arch=i386 syscall=open success=yes exit=3 a0=bfaacfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:139) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:139) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:139) : arch=i386 syscall=readlink success=yes exit=22 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:140) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:140) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:140) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:141) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:141) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:141) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:142) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:142) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:142) : arch=i386 syscall=readlink success=yes exit=12 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:143) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:143) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:143) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:144) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:144) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:144) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:145) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:145) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:145) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:146) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:146) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:146) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:147) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:147) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:147) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:148) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:148) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:148) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:149) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:149) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:149) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:150) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:150) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:150) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.628:151) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.628:151) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.628:151) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:152) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:152) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:152) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:153) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:153) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:153) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:154) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:154) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:154) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:155) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:155) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:155) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:156) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:156) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:156) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:157) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:157) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:157) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:158) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:158) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:158) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:159) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:159) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:159) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.632:160) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.632:160) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.632:160) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:161) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:161) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:161) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:162) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:162) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:162) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:163) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:163) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:163) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:164) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:164) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:164) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:165) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:165) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:165) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:166) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:166) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:166) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:167) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:167) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:167) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:168) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:168) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:168) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:169) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:169) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:169) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:170) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:170) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:170) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:171) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:171) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:171) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:172) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:172) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:172) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:173) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:173) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:173) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:174) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:174) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:174) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:175) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:175) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:175) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:176) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:176) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:176) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:177) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:177) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:177) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:178) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:178) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:178) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:179) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:179) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:179) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:180) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:180) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:180) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:181) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:181) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:181) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:182) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:182) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:182) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:183) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:183) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:183) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:184) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:184) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:184) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:185) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:185) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:185) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.648:186) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.648:186) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.648:186) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:187) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:187) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:187) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:188) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:188) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:188) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:189) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:189) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:189) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:190) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:190) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:190) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:191) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:191) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:191) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:192) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:192) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:192) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:193) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:193) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:193) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:194) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:194) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:194) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:195) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:195) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:195) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:196) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:196) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:196) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:197) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:197) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:197) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:198) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:198) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:198) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:199) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:199) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:199) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:200) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:200) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:200) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.652:201) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.652:201) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.652:201) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.656:202) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.656:202) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.656:202) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.656:203) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.656:203) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.656:203) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.656:204) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.656:204) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.656:204) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.656:205) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.656:205) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.656:205) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.656:206) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.656:206) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.656:206) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:207) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:207) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:207) : arch=i386 syscall=readlink success=yes exit=12 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:208) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:208) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:208) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:209) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:209) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:209) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:210) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:210) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:210) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:211) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:211) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:211) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:212) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:212) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:212) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:213) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:213) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:213) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:214) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:214) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:214) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:215) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:215) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:215) : arch=i386 syscall=readlink success=yes exit=13 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:216) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:216) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:216) : arch=i386 syscall=readlink success=yes exit=15 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:217) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:217) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:217) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:218) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:218) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:218) : arch=i386 syscall=readlink success=yes exit=17 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:219) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:219) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:219) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:220) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:220) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:220) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:221) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:221) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:221) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:222) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:222) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:222) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:223) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:223) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:223) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:50.660:224) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:50.660:224) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:50.660:224) : arch=i386 syscall=readlink success=yes exit=16 a0=bfaacfdc a1=bfaacbdc a2=400 a3=ffffffff items=1 ppid=4149 pid=4150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:226) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:53.536:226) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:226) : arch=i386 syscall=open success=yes exit=3 a0=80ec918 a1=8241 a2=1b6 a3=0 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:227) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:227) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:227) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:228) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:228) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:228) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:229) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:229) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:229) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:230) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:230) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:230) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:231) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:231) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:231) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:232) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:232) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:232) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:233) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:233) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:233) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:234) : item=0 name=/dev/.udev/db/block:sda inode=6819 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:234) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:234) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:235) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:235) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:235) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:236) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:236) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:236) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:237) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:237) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:237) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:238) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:238) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:238) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:239) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:239) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:239) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:240) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:240) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:240) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:241) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:241) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:241) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:242) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:242) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:242) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:243) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:243) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:243) : arch=i386 syscall=readlink success=yes exit=19 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:244) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:244) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:244) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:245) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:245) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:245) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:246) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:246) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:246) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:247) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:247) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:247) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:248) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:248) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:248) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:249) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:249) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:249) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:250) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:250) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:250) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:251) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:251) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:251) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:252) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:252) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:252) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:253) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:253) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:253) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:254) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:254) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:254) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:255) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:255) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:255) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:256) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:256) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:256) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:257) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:257) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:257) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:258) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:258) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:258) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:259) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:259) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:259) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:260) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:260) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:260) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:261) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:261) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:261) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:262) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:262) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:262) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:263) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:263) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:263) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:264) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:264) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:264) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:265) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:265) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:265) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:266) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:266) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:266) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:267) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:267) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:267) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:268) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:268) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:268) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:269) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:269) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:269) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:270) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:270) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:270) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:271) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:271) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:271) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:272) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:272) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:272) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:273) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:273) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:273) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:274) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:274) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:274) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:275) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:275) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:275) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:276) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:276) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:276) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:277) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:277) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:277) : arch=i386 syscall=readlink success=yes exit=21 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:278) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:278) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:278) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:279) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:279) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:279) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:280) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:280) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:280) : arch=i386 syscall=readlink success=yes exit=14 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:281) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:281) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:281) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:282) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:282) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:282) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:283) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:283) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:283) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:284) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:284) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:284) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:285) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:285) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:285) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:286) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:286) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:286) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:287) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:287) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:287) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:288) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:288) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:288) : arch=i386 syscall=readlink success=yes exit=26 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:289) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:289) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:289) : arch=i386 syscall=readlink success=yes exit=25 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:290) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:290) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:290) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:291) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:291) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:291) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:292) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:292) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:292) : arch=i386 syscall=readlink success=yes exit=18 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:293) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:293) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:293) : arch=i386 syscall=readlink success=yes exit=26 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:294) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:294) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:294) : arch=i386 syscall=readlink success=yes exit=29 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:295) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:295) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:295) : arch=i386 syscall=readlink success=yes exit=17 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:296) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:296) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:296) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:297) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:297) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:297) : arch=i386 syscall=readlink success=yes exit=20 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:298) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:298) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:298) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:299) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:299) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:299) : arch=i386 syscall=open success=yes exit=3 a0=bf9c65dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:300) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:300) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:300) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:301) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:301) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:301) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:302) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:302) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:302) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:303) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:303) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:303) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:304) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:304) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:304) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:305) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:305) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:305) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:306) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:306) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:306) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:307) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:307) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:307) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:308) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:308) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:308) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:309) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:309) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:309) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:310) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:310) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:310) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:311) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:311) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:311) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:312) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:312) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:312) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:313) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:313) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:313) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:314) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:314) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:314) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:315) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:315) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:315) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:316) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:316) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:316) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:317) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:317) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:317) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:318) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:318) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:318) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:319) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:319) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:319) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:320) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:320) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:320) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:321) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:321) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:321) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:322) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:322) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:322) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:323) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:323) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:323) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:324) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:324) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:324) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:325) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:325) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:325) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:326) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:326) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:326) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:327) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:327) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:327) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:328) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:328) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:328) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:329) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:329) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:329) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:330) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:330) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:330) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:331) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:331) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:331) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:332) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:332) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:332) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:333) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:333) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:333) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:334) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:334) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:334) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:335) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:335) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:335) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:336) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:336) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:336) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:337) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:337) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:337) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:338) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:338) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:338) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:339) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:339) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:339) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:340) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:340) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:340) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:341) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:341) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:341) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:342) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:342) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:342) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:343) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:343) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:343) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:344) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:344) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:344) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:345) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:345) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:345) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:346) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:346) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:346) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:347) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:347) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:347) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:348) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:348) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:348) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:349) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:349) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:349) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:350) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:350) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:350) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:351) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:351) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:351) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:352) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:352) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:352) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:353) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:353) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:353) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:354) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:354) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:354) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:355) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:355) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:355) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:356) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:356) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:356) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:357) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:357) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:357) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:358) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:358) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:358) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:359) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:359) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:359) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:360) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:360) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:360) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:361) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:361) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:361) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:362) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:362) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:362) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:363) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:363) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:363) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:364) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:364) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:364) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:365) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:365) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:365) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:366) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:366) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:366) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:367) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:367) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:367) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:368) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:368) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:368) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:369) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:369) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:369) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:370) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:370) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:370) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:371) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:371) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:371) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:372) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:372) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:372) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:373) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:373) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:373) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:374) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:374) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:374) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:375) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:375) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:375) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:376) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:376) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:376) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:377) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:377) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:377) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:378) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:378) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:378) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:379) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:379) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:379) : arch=i386 syscall=readlink success=yes exit=17 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:380) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:380) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:380) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:381) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:381) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:381) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:382) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:382) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:382) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:383) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:383) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:383) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:384) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:384) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:384) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:385) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:385) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:385) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9c65dc a1=bf9c61dc a2=400 a3=ffffffff items=1 ppid=4151 pid=4152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.872:386) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:53.872:386) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.872:386) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4154 pid=4155 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:53.536:225) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:53.536:225) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:53.536:225) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4151 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:54.888:387) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:54.888:387) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:54.888:387) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4157 pid=4158 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:54.992:388) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:54.992:388) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:54.992:388) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4162 pid=4163 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.053:389) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:55.053:389) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.053:389) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4163 pid=4164 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=boot.device-map exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.069:390) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.069:390) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.069:390) : arch=i386 syscall=open success=yes exit=3 a0=80ebf20 a1=8241 a2=1b6 a3=0 items=1 ppid=4165 pid=4166 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=boot.device-map exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.132:391) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.132:391) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.132:391) : arch=i386 syscall=open success=yes exit=3 a0=80eff58 a1=8241 a2=1b6 a3=0 items=1 ppid=4164 pid=4168 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=boot.device-map exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.189:392) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:55.189:392) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.189:392) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4163 pid=4169 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=boot.dmraid exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.204:393) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.204:393) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.204:393) : arch=i386 syscall=open success=yes exit=3 a0=80ebf10 a1=8241 a2=1b6 a3=0 items=1 ppid=4170 pid=4171 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=boot.dmraid exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.232:394) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.232:394) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.232:394) : arch=i386 syscall=open success=yes exit=3 a0=bf9638dc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4169 pid=4172 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:395) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:395) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:395) : arch=i386 syscall=open success=yes exit=5 a0=804e208 a1=0 a2=804e238 a3=804e208 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:396) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:396) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:396) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=b77a6aae items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:397) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:397) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:397) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:398) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:398) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:398) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:399) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:399) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:399) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:400) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:400) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:400) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:401) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:401) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:401) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:402) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:402) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:402) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.417:403) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.417:403) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.417:403) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:404) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:404) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:404) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:405) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:405) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:405) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffff8200 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:406) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:406) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:406) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0200 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:407) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:407) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:407) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0000 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:408) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:408) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:408) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffffe000 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:409) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:409) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:409) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffce200 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:410) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:410) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:410) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffb6200 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:411) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:411) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:411) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffaba00 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.421:412) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.421:412) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.421:412) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffa4200 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.441:413) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.441:413) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.441:413) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff8e200 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.441:414) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.441:414) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.441:414) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff86400 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.441:415) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.441:415) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.441:415) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff84200 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.441:416) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.441:416) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.441:416) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffe7e200 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.441:417) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.441:417) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.441:417) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.441:418) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.441:418) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.441:418) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.441:419) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.441:419) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.441:419) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.444:420) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.444:420) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.444:420) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.444:421) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.444:421) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.444:421) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4169 pid=4173 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.541:422) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:55.541:422) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.541:422) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4163 pid=4174 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=boot.lvm exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.557:423) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.557:423) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.557:423) : arch=i386 syscall=open success=yes exit=3 a0=80ebf10 a1=8241 a2=1b6 a3=0 items=1 ppid=4175 pid=4176 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=boot.lvm exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.644:424) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.644:424) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.644:424) : arch=i386 syscall=open success=yes exit=3 a0=bf86287c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4174 pid=4177 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:425) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:55.713:425) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:425) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:426) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:426) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:426) : arch=i386 syscall=open success=yes exit=3 a0=811f448 a1=98800 a2=b7738ff4 a3=811f440 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:427) : item=0 name=/dev/.mdadm inode=6133 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:427) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:427) : arch=i386 syscall=open success=yes exit=3 a0=8129be8 a1=98800 a2=b7738ff4 a3=8129be8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:428) : item=0 name=/dev/.sysconfig inode=5853 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:428) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:428) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b7738ff4 a3=812bca8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:429) : item=0 name=/dev/.sysconfig/network inode=5854 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:429) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:429) : arch=i386 syscall=open success=yes exit=3 a0=8134740 a1=98800 a2=b7738ff4 a3=8134740 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:430) : item=0 name=/dev/.udev inode=5285 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:430) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:430) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:431) : item=0 name=/dev/.udev/db inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:431) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:431) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b7738ff4 a3=8128aa0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:432) : item=0 name=/dev/.udev/links inode=5781 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:432) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:432) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b7738ff4 a3=8128aa0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:433) : item=0 name=/dev/.udev/links/cdrom inode=6029 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:433) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:433) : arch=i386 syscall=open success=yes exit=3 a0=8134780 a1=98800 a2=b7738ff4 a3=8134780 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:434) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6038 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:434) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:434) : arch=i386 syscall=open success=yes exit=3 a0=812a140 a1=98800 a2=b7738ff4 a3=812a140 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:435) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6040 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:435) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:435) : arch=i386 syscall=open success=yes exit=3 a0=8129d98 a1=98800 a2=b7738ff4 a3=8129d98 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:436) : item=0 name=/dev/.udev/links/disk\x2fby-label\x2fCDROM inode=6027 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:436) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:436) : arch=i386 syscall=open success=yes exit=3 a0=8129c88 a1=98800 a2=b7738ff4 a3=8129c88 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.713:437) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:01.1-scsi-1:0:0:0 inode=6025 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.713:437) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.713:437) : arch=i386 syscall=open success=yes exit=3 a0=8129da8 a1=98800 a2=b7738ff4 a3=8129da8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:438) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0 inode=6042 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:438) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:438) : arch=i386 syscall=open success=yes exit=3 a0=8129da8 a1=98800 a2=b7738ff4 a3=8129da8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:439) : item=0 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:439) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:439) : arch=i386 syscall=open success=yes exit=3 a0=8129df0 a1=98800 a2=b7738ff4 a3=8129df0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:440) : item=0 name=/dev/.udev/links/dvd inode=6031 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:440) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:440) : arch=i386 syscall=open success=yes exit=3 a0=8129c88 a1=98800 a2=b7738ff4 a3=8129c88 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:441) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-0-event-kbd inode=5850 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:441) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:441) : arch=i386 syscall=open success=yes exit=3 a0=8129cf0 a1=98800 a2=b7738ff4 a3=8129cf0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:442) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-event-mouse inode=5867 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:442) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:442) : arch=i386 syscall=open success=yes exit=3 a0=812a008 a1=98800 a2=b7738ff4 a3=812a008 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:443) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-mouse inode=5861 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:443) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:443) : arch=i386 syscall=open success=yes exit=3 a0=8129f60 a1=98800 a2=b7738ff4 a3=8129f60 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:444) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-pcspkr-event-spkr inode=5948 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:444) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:444) : arch=i386 syscall=open success=yes exit=3 a0=8129f60 a1=98800 a2=b7738ff4 a3=8129f60 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:445) : item=0 name=/dev/.udev/links/root inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:445) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:445) : arch=i386 syscall=open success=yes exit=3 a0=8134740 a1=98800 a2=b7738ff4 a3=8134740 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:446) : item=0 name=/dev/.udev/links/rtc inode=6011 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:446) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:446) : arch=i386 syscall=open success=yes exit=3 a0=812a0b0 a1=98800 a2=b7738ff4 a3=812a0b0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:447) : item=0 name=/dev/.udev/links/scd0 inode=6023 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:447) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:447) : arch=i386 syscall=open success=yes exit=3 a0=8129ef0 a1=98800 a2=b7738ff4 a3=8129ef0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:448) : item=0 name=/dev/.udev/rules.d inode=5286 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:448) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:448) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b7738ff4 a3=8128aa0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:449) : item=0 name=/dev/.udev/watch inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:449) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:449) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b7738ff4 a3=8128aa0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:450) : item=0 name=/dev/block inode=3875 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:450) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:450) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:451) : item=0 name=/dev/bsg inode=3967 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:451) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:451) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:452) : item=0 name=/dev/char inode=2837 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:452) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:452) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:453) : item=0 name=/dev/disk inode=4020 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:453) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:453) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:454) : item=0 name=/dev/disk/by-id inode=4021 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:454) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:454) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b7738ff4 a3=812bca8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:455) : item=0 name=/dev/disk/by-label inode=4043 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:455) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:455) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b7738ff4 a3=812bca8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:456) : item=0 name=/dev/disk/by-path inode=4028 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:456) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:456) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b7738ff4 a3=812bca8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:457) : item=0 name=/dev/disk/by-uuid inode=4680 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:457) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:457) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b7738ff4 a3=812bca8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:458) : item=0 name=/dev/input inode=3125 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:458) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:458) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:459) : item=0 name=/dev/input/by-path inode=3137 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:459) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:459) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b7738ff4 a3=8128aa0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:460) : item=0 name=/dev/mapper inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:460) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:460) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:461) : item=0 name=/dev/net inode=5241 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:461) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:461) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:462) : item=0 name=/dev/pts inode=1 dev=00:0b mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:462) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:462) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.717:463) : item=0 name=/dev/shm inode=5252 dev=00:10 mode=dir,sticky,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.717:463) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.717:463) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b7738ff4 a3=8129ce0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:464) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:464) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:464) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=48800 a2=0 a3=811fd38 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:465) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:465) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:465) : arch=i386 syscall=open success=yes exit=5 a0=811fde0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:466) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:466) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:466) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:467) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:467) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:467) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=4c000 a2=0 a3=811fd38 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:468) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:468) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:468) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=4c000 a2=0 a3=811fd38 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:469) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:469) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:469) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=48800 a2=0 a3=811f820 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:470) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:470) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:470) : arch=i386 syscall=open success=yes exit=5 a0=8120270 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:471) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:471) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:471) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:472) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:472) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:472) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=4c000 a2=0 a3=811f820 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:473) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:473) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:473) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=4c000 a2=0 a3=811f820 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:474) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:474) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:474) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=48800 a2=0 a3=811f628 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:475) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:475) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:475) : arch=i386 syscall=open success=yes exit=5 a0=811fe20 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:476) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:476) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:476) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.721:477) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:55.721:477) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.721:477) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=4c000 a2=0 a3=811f628 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:478) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:55.776:478) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:478) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=4c000 a2=0 a3=811f628 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:479) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:55.776:479) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:479) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=48800 a2=0 a3=811fbf0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:480) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:55.776:480) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:480) : arch=i386 syscall=open success=yes exit=5 a0=811fce0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:481) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:55.776:481) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:481) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:482) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:55.776:482) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:482) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=4c000 a2=0 a3=811fbf0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:483) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:55.776:483) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:483) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=4c000 a2=0 a3=811fbf0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:484) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:55:55.776:484) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:484) : arch=i386 syscall=open success=yes exit=3 a0=8121380 a1=48800 a2=0 a3=8120538 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:485) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:55:55.776:485) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:485) : arch=i386 syscall=open success=yes exit=5 a0=8121380 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:486) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:55.776:486) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:486) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=48800 a2=0 a3=811fe30 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:487) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:55.776:487) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:487) : arch=i386 syscall=open success=yes exit=5 a0=8120008 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:488) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:55.776:488) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:488) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:489) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:55.776:489) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:489) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=4c000 a2=0 a3=811fe30 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:490) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:55.776:490) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:490) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=4c000 a2=0 a3=811fe30 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:491) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:55:55.776:491) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:491) : arch=i386 syscall=open success=yes exit=3 a0=81213a0 a1=48800 a2=0 a3=81205d0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:492) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:55:55.776:492) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:492) : arch=i386 syscall=open success=yes exit=5 a0=81213a0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:493) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.776:493) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:493) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=48800 a2=0 a3=8120098 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:494) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.776:494) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:494) : arch=i386 syscall=open success=yes exit=5 a0=8120290 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:495) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.776:495) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:495) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:496) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.776:496) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:496) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=4c000 a2=0 a3=8120098 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:497) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.776:497) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:497) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=4c000 a2=0 a3=8120098 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:498) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:55:55.776:498) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:498) : arch=i386 syscall=open success=yes exit=3 a0=81213c0 a1=48800 a2=0 a3=8120668 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:499) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:55:55.776:499) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:499) : arch=i386 syscall=open success=yes exit=5 a0=81213c0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:500) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:55.776:500) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:500) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=48800 a2=0 a3=8120130 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:501) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:55.776:501) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:501) : arch=i386 syscall=open success=yes exit=5 a0=81202b0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:502) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:55.776:502) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:502) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:503) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:55.776:503) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:503) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=4c000 a2=0 a3=8120130 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:504) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:55.776:504) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:504) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=4c000 a2=0 a3=8120130 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:505) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:55:55.776:505) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:505) : arch=i386 syscall=open success=yes exit=3 a0=81213e0 a1=48800 a2=0 a3=8120700 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:506) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:55:55.776:506) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:506) : arch=i386 syscall=open success=yes exit=5 a0=81213e0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:507) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:55.776:507) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:507) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=48800 a2=0 a3=811fa70 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:508) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:55.776:508) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:508) : arch=i386 syscall=open success=yes exit=5 a0=811fb18 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.776:509) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:55.776:509) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.776:509) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:510) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:55.780:510) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:510) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=4c000 a2=0 a3=811fa70 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:511) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:55.780:511) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:511) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=4c000 a2=0 a3=811fa70 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:512) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:55:55.780:512) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:512) : arch=i386 syscall=open success=yes exit=3 a0=8121400 a1=48800 a2=0 a3=8120798 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:513) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:55:55.780:513) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:513) : arch=i386 syscall=open success=yes exit=5 a0=8121400 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:514) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:55.780:514) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:514) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=48800 a2=0 a3=811f908 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:515) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:55.780:515) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:515) : arch=i386 syscall=open success=yes exit=5 a0=811f9f8 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:516) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:55.780:516) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:516) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:517) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:55.780:517) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:517) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=4c000 a2=0 a3=811f908 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:518) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:55.780:518) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:518) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=4c000 a2=0 a3=811f908 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:519) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:55:55.780:519) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:519) : arch=i386 syscall=open success=yes exit=3 a0=8121420 a1=48800 a2=0 a3=8120830 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:520) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:55:55.780:520) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:520) : arch=i386 syscall=open success=yes exit=5 a0=8121420 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:521) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:55.780:521) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:521) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=48800 a2=0 a3=81201c8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:522) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:55.780:522) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:522) : arch=i386 syscall=open success=yes exit=5 a0=81202d0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:523) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:55.780:523) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:523) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:524) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:55.780:524) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:524) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=4c000 a2=0 a3=81201c8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:525) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:55.780:525) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:525) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=4c000 a2=0 a3=81201c8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:526) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:55:55.780:526) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:526) : arch=i386 syscall=open success=yes exit=3 a0=8121440 a1=48800 a2=0 a3=81208c8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:527) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:55:55.780:527) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:527) : arch=i386 syscall=open success=yes exit=5 a0=8121440 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:528) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:55.780:528) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:528) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=48800 a2=0 a3=811fec8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:529) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:55.780:529) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:529) : arch=i386 syscall=open success=yes exit=5 a0=8120028 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:530) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:55.780:530) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:530) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:531) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:55.780:531) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:531) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=4c000 a2=0 a3=811fec8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:532) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:55.780:532) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:532) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=4c000 a2=0 a3=811fec8 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:533) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:55.780:533) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:533) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=48800 a2=0 a3=811ff60 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:534) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:55.780:534) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:534) : arch=i386 syscall=open success=yes exit=5 a0=8120048 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:535) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:55.780:535) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:535) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:536) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:55.780:536) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:536) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=4c000 a2=0 a3=811ff60 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:537) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:55.780:537) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:537) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=4c000 a2=0 a3=811ff60 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:538) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:55.780:538) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:538) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=48800 a2=0 a3=811f760 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:539) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:55.780:539) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:539) : arch=i386 syscall=open success=yes exit=5 a0=811f7e8 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:540) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:55.780:540) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:540) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:541) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:55.780:541) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:541) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=4c000 a2=0 a3=811f760 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:542) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:55.780:542) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:542) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=4c000 a2=0 a3=811f760 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:543) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:55.780:543) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:543) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=48800 a2=0 a3=811f590 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:544) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:55.780:544) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:544) : arch=i386 syscall=open success=yes exit=5 a0=811f618 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:545) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:55.780:545) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:545) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:546) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:55.780:546) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:546) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=4c000 a2=0 a3=811f590 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:547) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:55.780:547) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:547) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=4c000 a2=0 a3=811f590 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:548) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:55.780:548) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:548) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=48800 a2=0 a3=811f6c0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:549) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:55.780:549) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:549) : arch=i386 syscall=open success=yes exit=5 a0=811f8f8 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:550) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:55.780:550) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:550) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:551) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:55.780:551) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:551) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=4c000 a2=0 a3=811f6c0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:552) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:55.780:552) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:552) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=4c000 a2=0 a3=811f6c0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:553) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:55.780:553) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:553) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=48800 a2=0 a3=811f450 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:554) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:55.780:554) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:554) : arch=i386 syscall=open success=yes exit=5 a0=811fa40 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:555) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:55.780:555) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:555) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:556) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:55.780:556) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:556) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=4c000 a2=0 a3=811f450 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:557) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:55.780:557) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:557) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=4c000 a2=0 a3=811f450 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:558) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:55.780:558) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:558) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=48800 a2=0 a3=811f4f0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:559) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:55.780:559) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:559) : arch=i386 syscall=open success=yes exit=5 a0=811fa60 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:560) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:55.780:560) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:560) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:561) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:55.780:561) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:561) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=4c000 a2=0 a3=811f4f0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:562) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:55.780:562) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:562) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=4c000 a2=0 a3=811f4f0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:563) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:55.780:563) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:563) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=48800 a2=0 a3=811fb28 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:564) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:55.780:564) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:564) : arch=i386 syscall=open success=yes exit=5 a0=8120088 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:565) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:55.780:565) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:565) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=8000 a2=0 a3=0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:566) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:55.780:566) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:566) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=4c000 a2=0 a3=811fb28 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:567) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:55.780:567) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:567) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=4c000 a2=0 a3=811fb28 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:568) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:55:55.780:568) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:568) : arch=i386 syscall=open success=yes exit=3 a0=bffb7a7c a1=8002 a2=0 a3=bffb7a7c items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.780:569) : item=0 name=/dev/mapper inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:55.780:569) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.780:569) : arch=i386 syscall=open success=yes exit=5 a0=b77a62a0 a1=98800 a2=b77a5ff4 a3=b77a62a0 items=1 ppid=4174 pid=4178 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:570) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:55.816:570) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:570) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:571) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:55.816:571) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:571) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=4c000 a2=0 a3=811fd38 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:572) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:55.816:572) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:572) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=4c000 a2=0 a3=811f820 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:573) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:55.816:573) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:573) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=4c000 a2=0 a3=811f628 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:574) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:55.816:574) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:574) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=4c000 a2=0 a3=811fbf0 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:575) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:55.816:575) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:575) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=4c000 a2=0 a3=811fe30 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:576) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:55.816:576) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:576) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=4c000 a2=0 a3=8120098 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:577) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:55.816:577) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:577) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=4c000 a2=0 a3=8120130 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:578) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:55.816:578) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:578) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=4c000 a2=0 a3=811fa70 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:579) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:55.816:579) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:579) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=4c000 a2=0 a3=811f908 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:580) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:55.816:580) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:580) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=4c000 a2=0 a3=81201c8 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:581) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:55.816:581) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:581) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=4c000 a2=0 a3=811fec8 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:582) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:55.816:582) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:582) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=4c000 a2=0 a3=811ff60 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:583) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:55.816:583) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:583) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=4c000 a2=0 a3=811f760 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:584) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:55.816:584) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:584) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=4c000 a2=0 a3=811f590 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:585) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:55.816:585) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:585) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=4c000 a2=0 a3=811f6c0 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:586) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:55.816:586) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:586) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=4c000 a2=0 a3=811f450 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:587) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:55.816:587) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:587) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=4c000 a2=0 a3=811f4f0 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:55.816:588) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:55.816:588) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:55.816:588) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=4c000 a2=0 a3=811fb28 items=1 ppid=4174 pid=4179 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.105:627) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:56.105:627) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.105:627) : arch=i386 syscall=open success=yes exit=3 a0=80b0f00 a1=c000 a2=0 a3=4000 items=1 ppid=4163 pid=4180 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.261:628) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.261:628) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.261:628) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4163 pid=4180 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.269:629) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:56.269:629) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.269:629) : arch=i386 syscall=open success=yes exit=3 a0=80b0ed8 a1=c000 a2=0 a3=4000 items=1 ppid=4163 pid=4180 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.269:630) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.269:630) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.269:630) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4163 pid=4180 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.277:631) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:56.277:631) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.277:631) : arch=i386 syscall=open success=yes exit=4 a0=809f170 a1=98800 a2=b77a2ff4 a3=0 items=1 ppid=4162 pid=4163 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.285:669) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:56.285:669) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.285:669) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=80b0ee0 a1=c080 a2=0 a3=4080 items=1 ppid=4162 pid=4163 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.285:670) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:56.285:670) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.285:670) : arch=i386 syscall=open success=yes exit=3 a0=80b0eb8 a1=c080 a2=0 a3=4080 items=1 ppid=4162 pid=4163 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.285:671) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.285:671) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.285:671) : arch=i386 syscall=open success=yes exit=5 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4162 pid=4163 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.380:672) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:56.380:672) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.380:672) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4182 pid=4183 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.620:673) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.620:673) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.620:673) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=100 a3=100 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.620:674) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.620:674) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.620:674) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=40000 a3=40000 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.624:675) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.624:675) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.624:675) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=1 a3=1 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.624:676) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.624:676) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.624:676) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=400 a3=400 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.624:677) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.624:677) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.624:677) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=100 a3=100 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.624:678) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.624:678) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.624:678) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=40 a3=40 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.624:679) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.624:679) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.624:679) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=f8 a3=f8 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.624:680) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.624:680) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.624:680) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=10 a3=10 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.624:681) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.624:681) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.624:681) : arch=i386 syscall=open success=yes exit=3 a0=b76ef478 a1=0 a2=f8 a3=f8 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.632:682) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:56.632:682) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.632:682) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4184 pid=4186 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.640:683) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:56.640:683) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.640:683) : arch=i386 syscall=open success=yes exit=3 a0=80ec838 a1=8241 a2=1b6 a3=0 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.680:684) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.680:684) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.680:684) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=804d008 a3=e0000 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.680:685) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.680:685) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.680:685) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.680:686) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.680:686) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.680:686) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.680:687) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.680:687) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.680:687) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7865be3 a3=1fff00f0 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.680:688) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.680:688) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.680:688) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=7 a3=1fff00f0 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.680:689) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.680:689) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.680:689) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0280 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.680:690) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.680:690) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.680:690) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0280 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.696:691) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.696:691) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.696:691) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.696:692) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.696:692) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.696:692) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.696:693) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.696:693) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.696:693) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0230 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.696:694) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.696:694) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.696:694) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=4020 a3=1fff0230 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:695) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:695) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:695) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0000 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:696) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:696) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:696) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0000 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:697) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:697) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:697) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7865be3 a3=1fff0070 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:698) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:698) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:698) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=6 a3=1fff0070 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:699) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:699) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:699) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b780aea8 a3=1fff0280 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:700) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:700) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:700) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff00f0 a3=1fff0280 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:701) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:701) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:701) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:702) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:702) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:702) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:703) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:703) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:703) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b780aea8 a3=1fff0230 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.700:704) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:56.700:704) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.700:704) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0230 items=1 ppid=4186 pid=4187 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.732:705) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:56.732:705) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.732:705) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4184 pid=4188 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:56.084:589) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:56.084:589) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:56.084:589) : arch=i386 syscall=open success=yes exit=4 a0=809f1b8 a1=98800 a2=b7804ff4 a3=0 items=1 ppid=4163 pid=4180 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.108:706) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:57.108:706) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.108:706) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4184 pid=4190 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.136:707) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:57.136:707) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.136:707) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4184 pid=4192 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.144:708) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:57.144:708) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.144:708) : arch=i386 syscall=open success=yes exit=3 a0=80ec870 a1=8241 a2=1b6 a3=0 items=1 ppid=4192 pid=4193 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.224:709) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.224:709) :  cwd=/sys/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda 
>type=SYSCALL msg=audit(04/20/10 11:55:57.224:709) : arch=i386 syscall=open success=yes exit=3 a0=8050469 a1=98800 a2=bf9e2484 a3=0 items=1 ppid=4192 pid=4193 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lsscsi exe=/usr/bin/lsscsi key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.236:710) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.236:710) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.236:710) : arch=i386 syscall=open success=yes exit=3 a0=8055228 a1=800 a2=0 a3=0 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.236:711) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:55:57.236:711) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.236:711) : arch=i386 syscall=open success=yes exit=3 a0=8127130 a1=800 a2=0 a3=0 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.252:712) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:55:57.252:712) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.252:712) : arch=i386 syscall=open success=yes exit=3 a0=8127130 a1=800 a2=0 a3=8126788 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.289:713) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:57.289:713) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.289:713) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4184 pid=4194 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.400:714) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:57.400:714) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.400:714) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4184 pid=4196 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.464:715) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.464:715) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.464:715) : arch=i386 syscall=open success=yes exit=3 a0=8055228 a1=0 a2=b7698ff4 a3=0 items=1 ppid=4198 pid=4199 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.468:716) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.468:716) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.468:716) : arch=i386 syscall=open success=yes exit=3 a0=8055228 a1=0 a2=5 a3=80550e0 items=1 ppid=4183 pid=4184 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwinfo exe=/usr/sbin/hwinfo key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.552:717) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:57.552:717) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.552:717) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4184 pid=4200 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.564:718) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:57.564:718) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.564:718) : arch=i386 syscall=open success=yes exit=3 a0=80ec900 a1=8241 a2=1b6 a3=0 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.581:719) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.581:719) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.581:719) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070570 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.581:720) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.581:720) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.581:720) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070570 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.585:721) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.585:721) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.585:721) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070748 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.585:722) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.585:722) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.585:722) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070748 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.585:723) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.585:723) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.585:723) : arch=i386 syscall=readlink success=yes exit=22 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.585:724) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.585:724) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.585:724) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:725) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:725) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:725) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:726) : item=0 name=/dev/.udev/db/block:sda inode=6819 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:726) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:726) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:727) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:727) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:727) : arch=i386 syscall=readlink success=yes exit=22 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:728) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:728) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:728) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:729) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:729) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:729) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:730) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:730) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:730) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:731) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:731) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:731) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:732) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:732) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:732) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:733) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:733) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:733) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:734) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:734) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:734) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:735) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:735) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:735) : arch=i386 syscall=readlink success=yes exit=19 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:736) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:736) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:736) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:737) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:737) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:737) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.589:738) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.589:738) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.589:738) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:739) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:739) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:739) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:740) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:740) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:740) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:741) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:741) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:741) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:742) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:742) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:742) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:743) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:743) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:743) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:744) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:744) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:744) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:745) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:745) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:745) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:746) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:746) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:746) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:747) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:747) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:747) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:748) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:748) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:748) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:749) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:749) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:749) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:750) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:750) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:750) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:751) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:751) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:751) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:752) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:752) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:752) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:753) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:753) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:753) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:754) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:754) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:754) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.593:755) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.593:755) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.593:755) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.597:756) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.597:756) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.597:756) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.597:757) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.597:757) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.597:757) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.597:758) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.597:758) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.597:758) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.597:759) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.597:759) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.597:759) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.597:760) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.597:760) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.597:760) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.597:761) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.597:761) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.597:761) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:762) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:762) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:762) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:763) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:763) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:763) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:764) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:764) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:764) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:765) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:765) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:765) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:766) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:766) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:766) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:767) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:767) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:767) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:768) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:768) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:768) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:769) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:769) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:769) : arch=i386 syscall=readlink success=yes exit=21 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:770) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:770) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:770) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:771) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:771) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:771) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:772) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:772) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:772) : arch=i386 syscall=readlink success=yes exit=14 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:773) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:773) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:773) : arch=i386 syscall=readlink success=yes exit=12 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:774) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:774) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:774) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:775) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:775) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:775) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:776) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:776) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:776) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:777) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:777) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:777) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:778) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:778) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:778) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:779) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:779) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:779) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:780) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:780) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:780) : arch=i386 syscall=readlink success=yes exit=26 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:781) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:781) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:781) : arch=i386 syscall=readlink success=yes exit=25 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:782) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:782) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:782) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:783) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:783) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:783) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:784) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:784) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:784) : arch=i386 syscall=readlink success=yes exit=18 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:785) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:785) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:785) : arch=i386 syscall=readlink success=yes exit=26 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:786) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:786) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:786) : arch=i386 syscall=readlink success=yes exit=29 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:787) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:787) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:787) : arch=i386 syscall=readlink success=yes exit=17 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:788) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:788) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:788) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:789) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:789) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:789) : arch=i386 syscall=readlink success=yes exit=20 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:790) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:790) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:790) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:791) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:791) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:791) : arch=i386 syscall=open success=yes exit=3 a0=bff2811c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:792) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:792) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:792) : arch=i386 syscall=readlink success=yes exit=22 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:793) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:793) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:793) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:794) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:794) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:794) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:795) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:795) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:795) : arch=i386 syscall=readlink success=yes exit=12 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:796) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:796) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:796) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:797) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:797) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:797) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:798) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:798) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:798) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:799) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:799) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:799) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:800) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:800) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:800) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:801) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:801) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:801) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:802) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:802) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:802) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:803) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:803) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:803) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:804) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:804) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:804) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:805) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:805) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:805) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:806) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:806) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:806) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:807) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:807) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:807) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:808) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:808) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:808) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:809) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:809) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:809) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:810) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:810) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:810) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:811) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:811) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:811) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:812) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:812) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:812) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:813) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:813) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:813) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:814) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:814) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:814) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:815) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:815) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:815) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:816) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:816) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:816) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:817) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:817) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:817) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:818) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:818) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:818) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:819) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:819) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:819) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:820) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:820) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:820) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:821) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:821) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:821) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:822) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:822) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:822) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:823) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:823) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:823) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:824) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:824) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:824) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:825) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:825) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:825) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:826) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:826) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:826) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:827) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:827) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:827) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:828) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:828) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:828) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:829) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:829) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:829) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:830) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:830) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:830) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:831) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:831) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:831) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:832) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:832) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:832) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:833) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:833) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:833) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:834) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:834) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:834) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:835) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:835) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:835) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:836) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:836) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:836) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:837) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:837) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:837) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:838) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:838) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:838) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:839) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:839) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:839) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:840) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:840) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:840) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:841) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:841) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:841) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:842) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:842) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:842) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:843) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:843) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:843) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:844) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:844) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:844) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:845) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:845) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:845) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:846) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:846) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:846) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:847) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:847) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:847) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:848) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:848) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:848) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:849) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:849) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:849) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:850) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:850) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:850) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:851) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:851) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:851) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:852) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:852) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:852) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:853) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:853) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:853) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:854) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:854) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:854) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:855) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:855) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:855) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:856) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:856) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:856) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:857) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:857) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:857) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:858) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:858) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:858) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:859) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:859) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:859) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:860) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:860) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:860) : arch=i386 syscall=readlink success=yes exit=12 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:861) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:861) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:861) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:862) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:862) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:862) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:863) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:863) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:863) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:864) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:864) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:864) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:865) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:865) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:865) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:866) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:866) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:866) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:867) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:867) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:867) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:868) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:868) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:868) : arch=i386 syscall=readlink success=yes exit=13 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:869) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:869) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:869) : arch=i386 syscall=readlink success=yes exit=15 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:870) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:870) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:870) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:871) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:871) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:871) : arch=i386 syscall=readlink success=yes exit=17 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:872) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:872) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:872) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:873) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:873) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:873) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:874) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:874) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:874) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:875) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:875) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:875) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:876) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:876) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:876) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:877) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:877) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:877) : arch=i386 syscall=readlink success=yes exit=16 a0=bff2811c a1=bff27d1c a2=400 a3=ffffffff items=1 ppid=4200 pid=4201 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:878) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:57.601:878) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:878) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4184 pid=4202 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.601:879) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:57.601:879) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.601:879) : arch=i386 syscall=open success=yes exit=3 a0=80ec870 a1=8241 a2=1b6 a3=0 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.653:880) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.653:880) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.653:880) : arch=i386 syscall=open success=yes exit=5 a0=804e208 a1=0 a2=804e238 a3=804e208 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.653:881) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.653:881) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.653:881) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=b7705aae items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:882) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:882) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:882) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:883) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:883) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:883) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:884) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:884) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:884) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:885) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:885) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:885) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:886) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:886) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:886) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:887) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:887) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:887) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:888) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:888) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:888) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:889) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:889) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:889) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:890) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:890) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:890) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffff8200 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:891) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:891) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:891) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0200 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.689:892) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.689:892) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.689:892) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0000 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:893) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:893) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:893) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffffe000 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:894) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:894) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:894) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffce200 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:895) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:895) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:895) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffb6200 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:896) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:896) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:896) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffaba00 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:897) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:897) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:897) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffa4200 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:898) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:898) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:898) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff8e200 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:899) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:899) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:899) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff86400 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:900) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:900) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:900) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff84200 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:901) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:901) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:901) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffe7e200 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:902) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:902) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:902) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:903) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:903) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:903) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:904) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:904) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:904) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:905) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:905) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:905) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:57.692:906) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:57.692:906) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:57.692:906) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4202 pid=4203 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.272:908) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:58.272:908) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.272:908) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4205 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.284:909) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:58.284:909) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.284:909) : arch=i386 syscall=open success=yes exit=3 a0=808eda0 a1=0 a2=0 a3=3 items=1 ppid=4147 pid=4205 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.308:910) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:58.308:910) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.308:910) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4206 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.496:911) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:55:58.496:911) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.496:911) : arch=i386 syscall=open success=yes exit=3 a0=bf89b2fc a1=8002 a2=0 a3=bf89b2fc items=1 ppid=4147 pid=4206 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.545:912) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:58.545:912) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.545:912) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.572:913) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.572:913) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.572:913) : arch=i386 syscall=open success=yes exit=5 a0=804e208 a1=0 a2=804e238 a3=804e208 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.576:914) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.576:914) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.576:914) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=b7819aae items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.576:915) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.576:915) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.576:915) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.576:916) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.576:916) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.576:916) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.576:917) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.576:917) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.576:917) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.576:918) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.576:918) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.576:918) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.576:919) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.576:919) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.576:919) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.576:920) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.576:920) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.576:920) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.576:921) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.576:921) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.576:921) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.584:922) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.584:922) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.584:922) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.584:923) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.584:923) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.584:923) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffff8200 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.584:924) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.584:924) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.584:924) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0200 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.584:925) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.584:925) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.584:925) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0000 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.584:926) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.584:926) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.584:926) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffffe000 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.584:927) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.584:927) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.584:927) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffce200 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:928) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:928) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:928) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffb6200 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:929) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:929) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:929) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffaba00 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:930) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:930) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:930) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffa4200 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:931) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:931) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:931) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff8e200 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:932) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:932) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:932) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff86400 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:933) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:933) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:933) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff84200 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:934) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:934) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:934) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffe7e200 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:935) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:935) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:935) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:936) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:936) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:936) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:937) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:937) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:937) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:938) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:938) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:938) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.588:939) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.588:939) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.588:939) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4147 pid=4207 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.636:940) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:58.636:940) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.636:940) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4208 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.648:941) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:58.648:941) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.648:941) : arch=i386 syscall=open success=yes exit=3 a0=bfd91f2c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4208 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.672:942) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:58.672:942) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.672:942) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4209 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.701:943) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:58.701:943) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.701:943) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4210 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.713:944) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:58.713:944) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.713:944) : arch=i386 syscall=open success=yes exit=4 a0=809f1b8 a1=98800 a2=b77f2ff4 a3=0 items=1 ppid=4210 pid=4211 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.721:982) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:58.721:982) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.721:982) : arch=i386 syscall=open success=yes exit=3 a0=80b0f00 a1=c000 a2=0 a3=4000 items=1 ppid=4210 pid=4211 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.921:983) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:58.921:983) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.921:983) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4210 pid=4211 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.921:984) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.921:984) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.921:984) : arch=i386 syscall=open success=yes exit=3 a0=80b0ed8 a1=c000 a2=0 a3=4000 items=1 ppid=4210 pid=4211 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.925:985) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:58.925:985) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.925:985) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4210 pid=4211 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.957:986) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:58.957:986) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.957:986) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4212 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.969:987) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:58.969:987) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.969:987) : arch=i386 syscall=open success=yes exit=4 a0=809f170 a1=98800 a2=b771aff4 a3=0 items=1 ppid=4147 pid=4212 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.977:1025) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:58.977:1025) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.977:1025) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=80b0ee0 a1=c080 a2=0 a3=4080 items=1 ppid=4147 pid=4212 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.977:1026) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:58.977:1026) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.977:1026) : arch=i386 syscall=open success=yes exit=3 a0=80b0eb8 a1=c080 a2=0 a3=4080 items=1 ppid=4147 pid=4212 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.977:1027) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:58.977:1027) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.977:1027) : arch=i386 syscall=open success=yes exit=5 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4147 pid=4212 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:58.016:907) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:58.016:907) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:58.016:907) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4204 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.029:1029) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.029:1029) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.029:1029) : arch=i386 syscall=open success=yes exit=3 a0=bfe88ffc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4213 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.056:1030) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:59.056:1030) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.056:1030) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4214 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.064:1031) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.064:1031) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.064:1031) : arch=i386 syscall=open success=yes exit=3 a0=bff9278c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4214 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.100:1032) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:59.100:1032) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.100:1032) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.125:1033) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:59.125:1033) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.125:1033) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1034) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1034) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1034) : arch=i386 syscall=open success=yes exit=3 a0=811f448 a1=98800 a2=b76b1ff4 a3=811f440 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1035) : item=0 name=/dev/.mdadm inode=6133 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1035) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1035) : arch=i386 syscall=open success=yes exit=3 a0=8129be8 a1=98800 a2=b76b1ff4 a3=8129be8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1036) : item=0 name=/dev/.sysconfig inode=5853 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1036) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1036) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b76b1ff4 a3=812bca8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1037) : item=0 name=/dev/.sysconfig/network inode=5854 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1037) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1037) : arch=i386 syscall=open success=yes exit=3 a0=8134740 a1=98800 a2=b76b1ff4 a3=8134740 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1038) : item=0 name=/dev/.udev inode=5285 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1038) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1038) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1039) : item=0 name=/dev/.udev/db inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1039) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1039) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b76b1ff4 a3=8128aa0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1040) : item=0 name=/dev/.udev/links inode=5781 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1040) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1040) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b76b1ff4 a3=8128aa0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1041) : item=0 name=/dev/.udev/links/cdrom inode=6029 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1041) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1041) : arch=i386 syscall=open success=yes exit=3 a0=8134780 a1=98800 a2=b76b1ff4 a3=8134780 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1042) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6038 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1042) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1042) : arch=i386 syscall=open success=yes exit=3 a0=812a140 a1=98800 a2=b76b1ff4 a3=812a140 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1043) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6040 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1043) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1043) : arch=i386 syscall=open success=yes exit=3 a0=8129d98 a1=98800 a2=b76b1ff4 a3=8129d98 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1044) : item=0 name=/dev/.udev/links/disk\x2fby-label\x2fCDROM inode=6027 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1044) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1044) : arch=i386 syscall=open success=yes exit=3 a0=8129c88 a1=98800 a2=b76b1ff4 a3=8129c88 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1045) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:01.1-scsi-1:0:0:0 inode=6025 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1045) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1045) : arch=i386 syscall=open success=yes exit=3 a0=8129da8 a1=98800 a2=b76b1ff4 a3=8129da8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1046) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0 inode=6042 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1046) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1046) : arch=i386 syscall=open success=yes exit=3 a0=8129da8 a1=98800 a2=b76b1ff4 a3=8129da8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1047) : item=0 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1047) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1047) : arch=i386 syscall=open success=yes exit=3 a0=8129df0 a1=98800 a2=b76b1ff4 a3=8129df0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1048) : item=0 name=/dev/.udev/links/dvd inode=6031 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1048) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1048) : arch=i386 syscall=open success=yes exit=3 a0=8129c88 a1=98800 a2=b76b1ff4 a3=8129c88 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1049) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-0-event-kbd inode=5850 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1049) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1049) : arch=i386 syscall=open success=yes exit=3 a0=8129cf0 a1=98800 a2=b76b1ff4 a3=8129cf0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1050) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-event-mouse inode=5867 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1050) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1050) : arch=i386 syscall=open success=yes exit=3 a0=812a008 a1=98800 a2=b76b1ff4 a3=812a008 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1051) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-mouse inode=5861 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1051) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1051) : arch=i386 syscall=open success=yes exit=3 a0=8129f60 a1=98800 a2=b76b1ff4 a3=8129f60 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1052) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-pcspkr-event-spkr inode=5948 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1052) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1052) : arch=i386 syscall=open success=yes exit=3 a0=8129f60 a1=98800 a2=b76b1ff4 a3=8129f60 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1053) : item=0 name=/dev/.udev/links/root inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1053) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1053) : arch=i386 syscall=open success=yes exit=3 a0=8134740 a1=98800 a2=b76b1ff4 a3=8134740 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1054) : item=0 name=/dev/.udev/links/rtc inode=6011 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1054) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1054) : arch=i386 syscall=open success=yes exit=3 a0=812a0b0 a1=98800 a2=b76b1ff4 a3=812a0b0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.129:1055) : item=0 name=/dev/.udev/links/scd0 inode=6023 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.129:1055) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.129:1055) : arch=i386 syscall=open success=yes exit=3 a0=8129ef0 a1=98800 a2=b76b1ff4 a3=8129ef0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1056) : item=0 name=/dev/.udev/rules.d inode=5286 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1056) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1056) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b76b1ff4 a3=8128aa0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1057) : item=0 name=/dev/.udev/watch inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1057) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1057) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b76b1ff4 a3=8128aa0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1058) : item=0 name=/dev/block inode=3875 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1058) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1058) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1059) : item=0 name=/dev/bsg inode=3967 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1059) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1059) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1060) : item=0 name=/dev/char inode=2837 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1060) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1060) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1061) : item=0 name=/dev/disk inode=4020 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1061) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1061) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1062) : item=0 name=/dev/disk/by-id inode=4021 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1062) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1062) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b76b1ff4 a3=812bca8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1063) : item=0 name=/dev/disk/by-label inode=4043 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1063) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1063) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b76b1ff4 a3=812bca8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1064) : item=0 name=/dev/disk/by-path inode=4028 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1064) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1064) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b76b1ff4 a3=812bca8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1065) : item=0 name=/dev/disk/by-uuid inode=4680 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1065) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1065) : arch=i386 syscall=open success=yes exit=3 a0=812bca8 a1=98800 a2=b76b1ff4 a3=812bca8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1066) : item=0 name=/dev/input inode=3125 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1066) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1066) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1067) : item=0 name=/dev/input/by-path inode=3137 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1067) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1067) : arch=i386 syscall=open success=yes exit=3 a0=8128aa0 a1=98800 a2=b76b1ff4 a3=8128aa0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1068) : item=0 name=/dev/mapper inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1068) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1068) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1069) : item=0 name=/dev/net inode=5241 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1069) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1069) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1070) : item=0 name=/dev/pts inode=1 dev=00:0b mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1070) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1070) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.133:1071) : item=0 name=/dev/shm inode=5252 dev=00:10 mode=dir,sticky,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.133:1071) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.133:1071) : arch=i386 syscall=open success=yes exit=3 a0=8129ce0 a1=98800 a2=b76b1ff4 a3=8129ce0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1072) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1072) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1072) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=48800 a2=0 a3=811fd38 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1073) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1073) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1073) : arch=i386 syscall=open success=yes exit=5 a0=811fde0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1074) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1074) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1074) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1075) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1075) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1075) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=4c000 a2=0 a3=811fd38 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1076) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1076) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1076) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=4c000 a2=0 a3=811fd38 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1077) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1077) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1077) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=48800 a2=0 a3=811f820 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1078) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1078) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1078) : arch=i386 syscall=open success=yes exit=5 a0=8120270 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1079) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1079) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1079) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1080) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1080) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1080) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=4c000 a2=0 a3=811f820 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1081) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1081) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1081) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=4c000 a2=0 a3=811f820 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1082) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1082) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1082) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=48800 a2=0 a3=811f628 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1083) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1083) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1083) : arch=i386 syscall=open success=yes exit=5 a0=811fe20 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1084) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1084) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1084) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.137:1085) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:59.137:1085) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.137:1085) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=4c000 a2=0 a3=811f628 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1086) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:59.225:1086) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1086) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=4c000 a2=0 a3=811f628 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1087) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:59.225:1087) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1087) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=48800 a2=0 a3=811fbf0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1088) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:59.225:1088) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1088) : arch=i386 syscall=open success=yes exit=5 a0=811fce0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1089) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:59.225:1089) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1089) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1090) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:59.225:1090) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1090) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=4c000 a2=0 a3=811fbf0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1091) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:59.225:1091) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1091) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=4c000 a2=0 a3=811fbf0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1092) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:55:59.225:1092) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1092) : arch=i386 syscall=open success=yes exit=3 a0=8121380 a1=48800 a2=0 a3=8120538 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1093) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:55:59.225:1093) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1093) : arch=i386 syscall=open success=yes exit=5 a0=8121380 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1094) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:59.225:1094) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1094) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=48800 a2=0 a3=811fe30 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1095) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:59.225:1095) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1095) : arch=i386 syscall=open success=yes exit=5 a0=8120008 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1096) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:59.225:1096) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1096) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1097) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:59.225:1097) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1097) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=4c000 a2=0 a3=811fe30 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1098) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:59.225:1098) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1098) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=4c000 a2=0 a3=811fe30 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1099) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:55:59.225:1099) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1099) : arch=i386 syscall=open success=yes exit=3 a0=81213a0 a1=48800 a2=0 a3=81205d0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1100) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:55:59.225:1100) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1100) : arch=i386 syscall=open success=yes exit=5 a0=81213a0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1101) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:59.225:1101) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1101) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=48800 a2=0 a3=8120098 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1102) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:59.225:1102) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1102) : arch=i386 syscall=open success=yes exit=5 a0=8120290 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1103) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:59.225:1103) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1103) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1104) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:59.225:1104) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1104) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=4c000 a2=0 a3=8120098 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1105) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:59.225:1105) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1105) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=4c000 a2=0 a3=8120098 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1106) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:55:59.225:1106) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1106) : arch=i386 syscall=open success=yes exit=3 a0=81213c0 a1=48800 a2=0 a3=8120668 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1107) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:55:59.225:1107) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1107) : arch=i386 syscall=open success=yes exit=5 a0=81213c0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1108) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:59.225:1108) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1108) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=48800 a2=0 a3=8120130 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1109) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:59.225:1109) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1109) : arch=i386 syscall=open success=yes exit=5 a0=81202b0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1110) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:59.225:1110) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1110) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1111) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:59.225:1111) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1111) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=4c000 a2=0 a3=8120130 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1112) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:59.225:1112) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1112) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=4c000 a2=0 a3=8120130 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1113) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:55:59.225:1113) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1113) : arch=i386 syscall=open success=yes exit=3 a0=81213e0 a1=48800 a2=0 a3=8120700 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1114) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:55:59.225:1114) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1114) : arch=i386 syscall=open success=yes exit=5 a0=81213e0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1115) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:59.225:1115) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1115) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=48800 a2=0 a3=811fa70 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1116) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:59.225:1116) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1116) : arch=i386 syscall=open success=yes exit=5 a0=811fb18 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1117) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:59.225:1117) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1117) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1118) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:59.225:1118) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1118) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=4c000 a2=0 a3=811fa70 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1119) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:59.225:1119) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1119) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=4c000 a2=0 a3=811fa70 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1120) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:55:59.225:1120) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1120) : arch=i386 syscall=open success=yes exit=3 a0=8121400 a1=48800 a2=0 a3=8120798 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1121) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:55:59.225:1121) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1121) : arch=i386 syscall=open success=yes exit=5 a0=8121400 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1122) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:59.225:1122) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1122) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=48800 a2=0 a3=811f908 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1123) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:59.225:1123) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1123) : arch=i386 syscall=open success=yes exit=5 a0=811f9f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1124) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:59.225:1124) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1124) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1125) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:59.225:1125) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1125) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=4c000 a2=0 a3=811f908 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1126) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:59.225:1126) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1126) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=4c000 a2=0 a3=811f908 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1127) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:55:59.225:1127) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1127) : arch=i386 syscall=open success=yes exit=3 a0=8121420 a1=48800 a2=0 a3=8120830 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1128) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:55:59.225:1128) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1128) : arch=i386 syscall=open success=yes exit=5 a0=8121420 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.225:1129) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:59.225:1129) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.225:1129) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=48800 a2=0 a3=81201c8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1130) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:59.229:1130) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1130) : arch=i386 syscall=open success=yes exit=5 a0=81202d0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1131) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:59.229:1131) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1131) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1132) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:59.229:1132) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1132) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=4c000 a2=0 a3=81201c8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1133) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:59.229:1133) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1133) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=4c000 a2=0 a3=81201c8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1134) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:55:59.229:1134) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1134) : arch=i386 syscall=open success=yes exit=3 a0=8121440 a1=48800 a2=0 a3=81208c8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1135) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:55:59.229:1135) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1135) : arch=i386 syscall=open success=yes exit=5 a0=8121440 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1136) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:59.229:1136) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1136) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=48800 a2=0 a3=811fec8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1137) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:59.229:1137) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1137) : arch=i386 syscall=open success=yes exit=5 a0=8120028 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1138) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:59.229:1138) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1138) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1139) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:59.229:1139) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1139) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=4c000 a2=0 a3=811fec8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1140) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:59.229:1140) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1140) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=4c000 a2=0 a3=811fec8 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1141) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:59.229:1141) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1141) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=48800 a2=0 a3=811ff60 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1142) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:59.229:1142) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1142) : arch=i386 syscall=open success=yes exit=5 a0=8120048 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1143) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:59.229:1143) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1143) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1144) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:59.229:1144) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1144) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=4c000 a2=0 a3=811ff60 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.013:1028) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:59.013:1028) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.013:1028) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4213 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1145) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:59.229:1145) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1145) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=4c000 a2=0 a3=811ff60 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1146) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:59.229:1146) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1146) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=48800 a2=0 a3=811f760 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1147) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:59.229:1147) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1147) : arch=i386 syscall=open success=yes exit=5 a0=811f7e8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1148) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:59.229:1148) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1148) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1149) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:59.229:1149) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1149) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=4c000 a2=0 a3=811f760 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1150) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:59.229:1150) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1150) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=4c000 a2=0 a3=811f760 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1151) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:59.229:1151) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1151) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=48800 a2=0 a3=811f590 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1152) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:59.229:1152) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1152) : arch=i386 syscall=open success=yes exit=5 a0=811f618 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1153) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:59.229:1153) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1153) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1154) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:59.229:1154) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1154) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=4c000 a2=0 a3=811f590 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1155) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:59.229:1155) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1155) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=4c000 a2=0 a3=811f590 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1156) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:59.229:1156) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1156) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=48800 a2=0 a3=811f6c0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1157) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:59.229:1157) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1157) : arch=i386 syscall=open success=yes exit=5 a0=811f8f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1158) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:59.229:1158) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1158) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1159) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:59.229:1159) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1159) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=4c000 a2=0 a3=811f6c0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1160) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:59.229:1160) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1160) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=4c000 a2=0 a3=811f6c0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1161) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:59.229:1161) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1161) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=48800 a2=0 a3=811f450 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1162) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:59.229:1162) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1162) : arch=i386 syscall=open success=yes exit=5 a0=811fa40 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1163) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:59.229:1163) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1163) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1164) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:59.229:1164) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1164) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=4c000 a2=0 a3=811f450 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1165) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:59.229:1165) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1165) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=4c000 a2=0 a3=811f450 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1166) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:59.229:1166) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1166) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=48800 a2=0 a3=811f4f0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1167) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:59.229:1167) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1167) : arch=i386 syscall=open success=yes exit=5 a0=811fa60 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1168) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:59.229:1168) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1168) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1169) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:59.229:1169) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1169) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=4c000 a2=0 a3=811f4f0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1170) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:59.229:1170) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1170) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=4c000 a2=0 a3=811f4f0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1171) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:59.229:1171) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1171) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=48800 a2=0 a3=811fb28 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1172) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:59.229:1172) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1172) : arch=i386 syscall=open success=yes exit=5 a0=8120088 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1173) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:59.229:1173) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1173) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1174) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:59.229:1174) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1174) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=4c000 a2=0 a3=811fb28 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1175) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:59.229:1175) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1175) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=4c000 a2=0 a3=811fb28 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1176) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:55:59.229:1176) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1176) : arch=i386 syscall=open success=yes exit=3 a0=bff7e76c a1=8002 a2=0 a3=bff7e76c items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.229:1177) : item=0 name=/dev/mapper inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.229:1177) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.229:1177) : arch=i386 syscall=open success=yes exit=5 a0=b771f2a0 a1=98800 a2=b771eff4 a3=b771f2a0 items=1 ppid=4147 pid=4215 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgscan exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.289:1178) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:59.289:1178) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.289:1178) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.317:1179) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:59.317:1179) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.317:1179) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.317:1180) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:55:59.317:1180) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.317:1180) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=4c000 a2=0 a3=811fd38 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.317:1181) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:59.317:1181) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.317:1181) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=4c000 a2=0 a3=811f820 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.317:1182) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:55:59.317:1182) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.317:1182) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=4c000 a2=0 a3=811f628 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1183) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:55:59.337:1183) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1183) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=4c000 a2=0 a3=811fbf0 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1184) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:55:59.337:1184) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1184) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=4c000 a2=0 a3=811fe30 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1185) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:55:59.337:1185) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1185) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=4c000 a2=0 a3=8120098 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1186) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:55:59.337:1186) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1186) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=4c000 a2=0 a3=8120130 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1187) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:55:59.337:1187) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1187) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=4c000 a2=0 a3=811fa70 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1188) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:55:59.337:1188) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1188) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=4c000 a2=0 a3=811f908 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1189) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:55:59.337:1189) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1189) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=4c000 a2=0 a3=81201c8 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1190) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:55:59.337:1190) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1190) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=4c000 a2=0 a3=811fec8 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1191) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:55:59.337:1191) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1191) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=4c000 a2=0 a3=811ff60 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1192) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:55:59.337:1192) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1192) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=4c000 a2=0 a3=811f760 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1193) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:55:59.337:1193) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1193) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=4c000 a2=0 a3=811f590 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1194) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:55:59.337:1194) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1194) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=4c000 a2=0 a3=811f6c0 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1195) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:55:59.337:1195) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1195) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=4c000 a2=0 a3=811f450 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1196) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:55:59.337:1196) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1196) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=4c000 a2=0 a3=811f4f0 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.337:1197) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:55:59.337:1197) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.337:1197) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=4c000 a2=0 a3=811fb28 items=1 ppid=4147 pid=4216 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgchange exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.373:1198) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:59.373:1198) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.373:1198) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4217 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.381:1199) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:55:59.381:1199) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.381:1199) : arch=i386 syscall=open success=yes exit=3 a0=bffb22bc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4217 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.600:1200) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:55:59.600:1200) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.600:1200) : arch=i386 syscall=open success=yes exit=17 a0=8c4669c a1=0 a2=ff a3=8c43cf0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:55:59.624:1201) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:55:59.624:1201) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:55:59.624:1201) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4218 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.232:1203) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.232:1203) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.232:1203) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4218 pid=4219 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.252:1204) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:00.252:1204) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.252:1204) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4221 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.408:1205) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.408:1205) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.408:1205) : arch=i386 syscall=open success=yes exit=3 a0=bf8e4f1c a1=8800 a2=0 a3=bf8e4f1c items=1 ppid=1510 pid=4221 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.416:1206) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:00.416:1206) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.416:1206) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4223 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.424:1207) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:00.424:1207) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.424:1207) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4222 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.480:1208) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.480:1208) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.480:1208) : arch=i386 syscall=open success=yes exit=3 a0=bfafd65c a1=8800 a2=0 a3=bfafda14 items=1 ppid=1510 pid=4223 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.484:1209) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.484:1209) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.484:1209) : arch=i386 syscall=open success=yes exit=3 a0=bfafd65c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4223 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.488:1210) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:00.488:1210) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.488:1210) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4224 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.492:1211) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.492:1211) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.492:1211) : arch=i386 syscall=open success=yes exit=3 a0=bf94a536 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4222 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=fdisk exe=/sbin/fdisk key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.496:1212) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.496:1212) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.496:1212) : arch=i386 syscall=open success=yes exit=3 a0=bf94a536 a1=8000 a2=0 a3=3 items=1 ppid=4147 pid=4222 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=fdisk exe=/sbin/fdisk key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.496:1213) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.496:1213) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.496:1213) : arch=i386 syscall=open success=yes exit=4 a0=bf94a536 a1=8000 a2=0 a3=3 items=1 ppid=4147 pid=4222 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=fdisk exe=/sbin/fdisk key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.532:1214) : item=0 name=/dev/disk/by-path inode=4028 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:00.532:1214) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.532:1214) : arch=i386 syscall=open success=yes exit=17 a0=8c41dac a1=0 a2=bf860640 a3=8c44b98 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.540:1215) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:00.540:1215) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.540:1215) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4225 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.556:1216) : item=0 name=/dev/disk/by-id inode=4021 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:00.556:1216) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.556:1216) : arch=i386 syscall=open success=yes exit=17 a0=8c43bac a1=0 a2=bf860640 a3=8c44b98 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.576:1217) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:00.576:1217) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.576:1217) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.676:1218) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.676:1218) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.676:1218) : arch=i386 syscall=open success=yes exit=3 a0=bfd8dc6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4225 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.680:1219) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.680:1219) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.680:1219) : arch=i386 syscall=open success=yes exit=5 a0=804e208 a1=0 a2=804e238 a3=804e208 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.680:1220) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.680:1220) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.680:1220) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=b77ebaae items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.680:1221) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.680:1221) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.680:1221) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.680:1222) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.680:1222) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.680:1222) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.680:1223) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.680:1223) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.680:1223) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.680:1224) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.680:1224) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.680:1224) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1225) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1225) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1225) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1226) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1226) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1226) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1227) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1227) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1227) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1228) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1228) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1228) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1229) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1229) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1229) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffff8200 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1230) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1230) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1230) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0200 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1231) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1231) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1231) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0000 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1232) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1232) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1232) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffffe000 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1233) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1233) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1233) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffce200 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1234) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1234) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1234) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffb6200 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.700:1235) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.700:1235) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.700:1235) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffaba00 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1236) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1236) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1236) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffa4200 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1237) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1237) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1237) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff8e200 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1238) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1238) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1238) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff86400 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1239) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1239) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1239) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff84200 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1240) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1240) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1240) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffe7e200 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1241) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1241) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1241) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1242) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1242) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1242) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1243) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1243) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1243) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1244) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1244) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1244) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.704:1245) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.704:1245) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.704:1245) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4147 pid=4226 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.740:1246) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:00.740:1246) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.740:1246) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4227 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.756:1247) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:00.756:1247) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.756:1247) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4228 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.976:1248) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.976:1248) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.976:1248) : arch=i386 syscall=open success=yes exit=4 a0=bffe3c65 a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4228 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.980:1249) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:00.980:1249) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:00.980:1249) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4229 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:00.232:1202) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:00.232:1202) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:00.232:1202) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4218 pid=4219 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.685:1282) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.685:1282) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.685:1282) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40000 a3=40000 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.688:1283) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.688:1283) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.688:1283) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=1 a3=1 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.688:1284) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.688:1284) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.688:1284) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=400 a3=400 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.688:1285) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.688:1285) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.688:1285) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.688:1286) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.688:1286) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.688:1286) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40 a3=40 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.688:1287) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.688:1287) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.688:1287) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=f8 a3=f8 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.708:1288) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:02.708:1288) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.708:1288) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4235 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.784:1289) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:02.784:1289) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.784:1289) : arch=i386 syscall=open success=yes exit=3 a0=80ec850 a1=8241 a2=1b6 a3=0 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.792:1290) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.792:1290) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.792:1290) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=804d008 a3=e0000 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.800:1291) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.800:1291) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.800:1291) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.800:1292) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.800:1292) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.800:1292) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.800:1293) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.800:1293) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.800:1293) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7884be3 a3=1fff00f0 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.800:1294) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.800:1294) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.800:1294) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=7 a3=1fff00f0 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.800:1295) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.800:1295) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.800:1295) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0280 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.800:1296) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.800:1296) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.800:1296) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0280 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1297) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1297) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1297) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1298) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1298) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1298) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1299) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1299) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1299) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0230 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1300) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1300) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1300) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=4020 a3=1fff0230 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1301) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1301) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1301) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0000 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1302) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1302) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1302) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0000 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1303) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1303) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1303) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7884be3 a3=1fff0070 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1304) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1304) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1304) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=6 a3=1fff0070 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1305) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1305) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1305) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7829ea8 a3=1fff0280 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1306) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1306) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1306) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff00f0 a3=1fff0280 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1307) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1307) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1307) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1308) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1308) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1308) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1309) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1309) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1309) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7829ea8 a3=1fff0230 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.813:1310) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.813:1310) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.813:1310) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0230 items=1 ppid=4235 pid=4236 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.825:1311) : item=0 name=/dev/psaux inode=2910 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:01 
>type=CWD msg=audit(04/20/10 11:56:02.825:1311) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.825:1311) : arch=i386 syscall=open success=yes exit=17 a0=b3f7e68d a1=800 a2=0 a3=bf85f344 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.892:1312) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:02.892:1312) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.892:1312) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4237 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.936:1313) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:02.936:1313) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.936:1313) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4239 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.956:1314) : item=0 name=/dev/console inode=2784 dev=00:0e mode=character,600 ouid=root ogid=root rdev=05:01 
>type=CWD msg=audit(04/20/10 11:56:02.956:1314) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.956:1314) : arch=i386 syscall=open success=yes exit=17 a0=b3f7d66d a1=902 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.080:1250) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:56:01.080:1250) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.080:1250) : arch=i386 syscall=open success=yes exit=3 a0=bfd733cc a1=8002 a2=0 a3=bfd733cc items=1 ppid=4147 pid=4227 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=multipath exe=/sbin/multipath key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.277:1251) : item=0 name=/dev/.udev/db/block:sda inode=6819 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:01.277:1251) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:01.277:1251) : arch=i386 syscall=open success=yes exit=3 a0=bf805f1c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4229 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.281:1252) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:01.281:1252) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:01.281:1252) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4229 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.285:1253) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:01.285:1253) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:01.285:1253) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4231 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.293:1254) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:01.293:1254) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.293:1254) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4230 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.337:1255) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:56:01.337:1255) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.337:1255) : arch=i386 syscall=open success=yes exit=3 a0=bfba2a3c a1=8002 a2=0 a3=bfba2a3c items=1 ppid=4147 pid=4230 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.365:1256) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:01.365:1256) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:01.365:1256) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4231 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.369:1257) : item=0 name=/dev/.udev/db/block:sda inode=6819 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:01.369:1257) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:56:01.369:1257) : arch=i386 syscall=open success=yes exit=4 a0=bfbe892c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4231 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.373:1258) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:01.373:1258) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.373:1258) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.401:1259) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:56:01.401:1259) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.401:1259) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.401:1260) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:56:01.401:1260) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.401:1260) : arch=i386 syscall=open success=yes exit=3 a0=811fde0 a1=4c000 a2=0 a3=811fd38 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.401:1261) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:01.401:1261) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.401:1261) : arch=i386 syscall=open success=yes exit=3 a0=8120270 a1=4c000 a2=0 a3=811f820 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.405:1262) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:56:01.405:1262) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.405:1262) : arch=i386 syscall=open success=yes exit=3 a0=811fe20 a1=4c000 a2=0 a3=811f628 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1263) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:01.409:1263) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1263) : arch=i386 syscall=open success=yes exit=3 a0=811fce0 a1=4c000 a2=0 a3=811fbf0 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1264) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:56:01.409:1264) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1264) : arch=i386 syscall=open success=yes exit=3 a0=8120008 a1=4c000 a2=0 a3=811fe30 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1265) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:01.409:1265) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1265) : arch=i386 syscall=open success=yes exit=3 a0=8120290 a1=4c000 a2=0 a3=8120098 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1266) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:56:01.409:1266) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1266) : arch=i386 syscall=open success=yes exit=3 a0=81202b0 a1=4c000 a2=0 a3=8120130 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1267) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:56:01.409:1267) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1267) : arch=i386 syscall=open success=yes exit=3 a0=811fb18 a1=4c000 a2=0 a3=811fa70 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1268) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:56:01.409:1268) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1268) : arch=i386 syscall=open success=yes exit=3 a0=811f9f8 a1=4c000 a2=0 a3=811f908 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1269) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:56:01.409:1269) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1269) : arch=i386 syscall=open success=yes exit=3 a0=81202d0 a1=4c000 a2=0 a3=81201c8 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1270) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:56:01.409:1270) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1270) : arch=i386 syscall=open success=yes exit=3 a0=8120028 a1=4c000 a2=0 a3=811fec8 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1271) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:56:01.409:1271) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1271) : arch=i386 syscall=open success=yes exit=3 a0=8120048 a1=4c000 a2=0 a3=811ff60 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1272) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:56:01.409:1272) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1272) : arch=i386 syscall=open success=yes exit=3 a0=811f7e8 a1=4c000 a2=0 a3=811f760 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1273) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:56:01.409:1273) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1273) : arch=i386 syscall=open success=yes exit=3 a0=811f618 a1=4c000 a2=0 a3=811f590 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1274) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:56:01.409:1274) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1274) : arch=i386 syscall=open success=yes exit=3 a0=811f8f8 a1=4c000 a2=0 a3=811f6c0 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1275) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:56:01.409:1275) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1275) : arch=i386 syscall=open success=yes exit=3 a0=811fa40 a1=4c000 a2=0 a3=811f450 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1276) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:56:01.409:1276) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1276) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=4c000 a2=0 a3=811f4f0 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.409:1277) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:56:01.409:1277) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.409:1277) : arch=i386 syscall=open success=yes exit=3 a0=8120088 a1=4c000 a2=0 a3=811fb28 items=1 ppid=4147 pid=4232 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgs exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.449:1278) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:01.449:1278) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.449:1278) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4233 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.577:1279) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:56:01.577:1279) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.577:1279) : arch=i386 syscall=open success=yes exit=4 a0=bfd65e14 a1=8000 a2=0 a3=bfd65e14 items=1 ppid=4147 pid=4233 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=losetup exe=/sbin/losetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:01.825:1280) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:01.825:1280) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:01.825:1280) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4234 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:02.685:1281) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:02.685:1281) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:02.685:1281) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.020:1315) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:03.020:1315) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.020:1315) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4241 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.029:1316) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:03.029:1316) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.029:1316) : arch=i386 syscall=open success=yes exit=3 a0=80ec918 a1=8241 a2=1b6 a3=0 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.124:1317) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.124:1317) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.124:1317) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070570 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.128:1318) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.128:1318) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.128:1318) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070570 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.128:1319) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.128:1319) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.128:1319) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070748 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.128:1320) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.128:1320) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.128:1320) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070748 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1321) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1321) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1321) : arch=i386 syscall=readlink success=yes exit=22 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1322) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1322) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1322) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1323) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1323) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1323) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1324) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1324) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1324) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1325) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1325) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1325) : arch=i386 syscall=readlink success=yes exit=22 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1326) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1326) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1326) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1327) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1327) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1327) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1328) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1328) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1328) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1329) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1329) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1329) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1330) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1330) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1330) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1331) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1331) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1331) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.132:1332) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.132:1332) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.132:1332) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1333) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1333) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1333) : arch=i386 syscall=readlink success=yes exit=19 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1334) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1334) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1334) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1335) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1335) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1335) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1336) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1336) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1336) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1337) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1337) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1337) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1338) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1338) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1338) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1339) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1339) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1339) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1340) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1340) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1340) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1341) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1341) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1341) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1342) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1342) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1342) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1343) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1343) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1343) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1344) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1344) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1344) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.136:1345) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.136:1345) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.136:1345) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1346) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1346) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1346) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1347) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1347) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1347) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1348) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1348) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1348) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1349) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1349) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1349) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1350) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1350) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1350) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1351) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1351) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1351) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1352) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1352) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1352) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1353) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1353) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1353) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1354) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1354) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1354) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1355) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1355) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1355) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1356) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1356) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1356) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1357) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1357) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1357) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1358) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1358) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1358) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1359) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1359) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1359) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1360) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1360) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1360) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1361) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1361) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1361) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1362) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1362) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1362) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1363) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1363) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1363) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1364) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1364) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1364) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1365) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1365) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1365) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1366) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1366) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1366) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1367) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1367) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1367) : arch=i386 syscall=readlink success=yes exit=21 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1368) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1368) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1368) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1369) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1369) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1369) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1370) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1370) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1370) : arch=i386 syscall=readlink success=yes exit=14 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.140:1371) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.140:1371) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.140:1371) : arch=i386 syscall=readlink success=yes exit=12 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1372) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1372) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1372) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1373) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1373) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1373) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1374) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1374) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1374) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1375) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1375) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1375) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1376) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1376) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1376) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1377) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1377) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1377) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1378) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1378) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1378) : arch=i386 syscall=readlink success=yes exit=26 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1379) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1379) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1379) : arch=i386 syscall=readlink success=yes exit=25 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1380) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1380) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1380) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1381) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1381) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1381) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1382) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1382) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1382) : arch=i386 syscall=readlink success=yes exit=18 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1383) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1383) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1383) : arch=i386 syscall=readlink success=yes exit=26 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1384) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1384) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1384) : arch=i386 syscall=readlink success=yes exit=29 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1385) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1385) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1385) : arch=i386 syscall=readlink success=yes exit=17 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1386) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1386) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1386) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1387) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1387) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1387) : arch=i386 syscall=readlink success=yes exit=20 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1388) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1388) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1388) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1389) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1389) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1389) : arch=i386 syscall=open success=yes exit=3 a0=bfc7149c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1390) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1390) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1390) : arch=i386 syscall=readlink success=yes exit=22 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1391) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1391) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1391) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1392) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1392) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1392) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1393) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1393) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1393) : arch=i386 syscall=readlink success=yes exit=12 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1394) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1394) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1394) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1395) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1395) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1395) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1396) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1396) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1396) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1397) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1397) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1397) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1398) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1398) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1398) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1399) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1399) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1399) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1400) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1400) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1400) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1401) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1401) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1401) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.144:1402) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.144:1402) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.144:1402) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1403) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1403) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1403) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1404) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1404) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1404) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1405) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1405) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1405) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1406) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1406) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1406) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1407) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1407) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1407) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1408) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1408) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1408) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1409) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1409) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1409) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1410) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1410) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1410) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1411) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1411) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1411) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1412) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1412) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1412) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1413) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1413) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1413) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1414) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1414) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1414) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1415) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1415) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1415) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1416) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1416) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1416) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1417) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1417) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1417) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1418) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1418) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1418) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1419) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1419) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1419) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1420) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1420) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1420) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1421) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1421) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1421) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1422) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1422) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1422) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1423) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1423) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1423) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1424) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1424) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1424) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1425) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1425) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1425) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1426) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1426) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1426) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1427) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1427) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1427) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1428) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1428) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1428) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1429) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1429) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1429) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1430) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1430) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1430) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1431) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1431) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1431) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1432) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1432) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1432) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1433) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1433) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1433) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1434) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1434) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1434) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.148:1435) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.148:1435) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.148:1435) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1436) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1436) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1436) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1437) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1437) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1437) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1438) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1438) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1438) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1439) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1439) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1439) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1440) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1440) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1440) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1441) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1441) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1441) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1442) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1442) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1442) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1443) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1443) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1443) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1444) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1444) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1444) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1445) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1445) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1445) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1446) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1446) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1446) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1447) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1447) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1447) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.152:1448) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.152:1448) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.152:1448) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1449) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1449) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1449) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1450) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1450) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1450) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1451) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1451) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1451) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1452) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1452) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1452) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1453) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1453) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1453) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1454) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1454) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1454) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1455) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1455) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1455) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1456) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1456) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1456) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1457) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1457) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1457) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1458) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1458) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1458) : arch=i386 syscall=readlink success=yes exit=12 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1459) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1459) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1459) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1460) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1460) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1460) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.156:1461) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.156:1461) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.156:1461) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1462) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1462) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1462) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1463) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1463) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1463) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1464) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1464) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1464) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1465) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1465) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1465) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1466) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1466) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1466) : arch=i386 syscall=readlink success=yes exit=13 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1467) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1467) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1467) : arch=i386 syscall=readlink success=yes exit=15 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1468) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1468) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1468) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1469) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1469) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1469) : arch=i386 syscall=readlink success=yes exit=17 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1470) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1470) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1470) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1471) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1471) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1471) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1472) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1472) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1472) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1473) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1473) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1473) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1474) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1474) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1474) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.160:1475) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:03.160:1475) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.160:1475) : arch=i386 syscall=readlink success=yes exit=16 a0=bfc7149c a1=bfc7109c a2=400 a3=ffffffff items=1 ppid=4241 pid=4242 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:03.989:1476) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:56:03.989:1476) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:03.989:1476) : arch=i386 syscall=open success=yes exit=17 a0=b57ba314 a1=8000 a2=1b6 a3=8d0fa98 items=1 ppid=4120 pid=4148 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:05.525:1477) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:05.525:1477) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:05.525:1477) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4244 pid=4245 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:06.168:1478) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:06.168:1478) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:06.168:1478) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4252 pid=4253 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:07.849:1479) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:07.849:1479) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:07.849:1479) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4255 pid=4256 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.249:1480) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:08.249:1480) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.249:1480) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4256 pid=4257 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.373:1481) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:08.373:1481) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.373:1481) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4256 pid=4258 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.404:1483) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:08.404:1483) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.404:1483) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805502b a1=2 a2=0 a3=805502b items=1 ppid=4255 pid=4256 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=loadkeys exe=/bin/loadkeys key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.404:1484) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:08.404:1484) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.404:1484) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805502b a1=1 a2=0 a3=805502b items=1 ppid=4255 pid=4256 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=loadkeys exe=/bin/loadkeys key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.404:1485) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:08.404:1485) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.404:1485) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805502b a1=0 a2=0 a3=805502b items=1 ppid=4255 pid=4256 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=loadkeys exe=/bin/loadkeys key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.404:1486) : item=0 name=/dev/tty0 inode=2922 dev=00:0e mode=character,620 ouid=root ogid=root rdev=04:00 
>type=CWD msg=audit(04/20/10 11:56:08.404:1486) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.404:1486) : arch=i386 syscall=open success=yes exit=19 a0=8055034 a1=2 a2=0 a3=8055034 items=1 ppid=4255 pid=4256 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=loadkeys exe=/bin/loadkeys key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.481:1487) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:08.481:1487) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.481:1487) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4260 pid=4261 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.653:1488) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:08.653:1488) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.653:1488) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4263 pid=4264 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:08.672:1489) : item=0 name=/dev/rtc inode=6008 dev=00:0e mode=character,660 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:56:08.672:1489) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:08.672:1489) : arch=i386 syscall=open success=yes exit=4 a0=804fda0 a1=8000 a2=0 a3=bffcaad0 items=1 ppid=4263 pid=4264 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwclock exe=/sbin/hwclock key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.684:1491) : item=0 name=/dev/nvram inode=2907 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=0a:90 
>type=CWD msg=audit(04/20/10 11:56:10.684:1491) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.684:1491) : arch=i386 syscall=open success=yes exit=17 a0=b3f79eca a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.688:1492) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.688:1492) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.688:1492) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.688:1493) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.688:1493) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.688:1493) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40000 a3=40000 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.692:1494) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.692:1494) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.692:1494) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=1 a3=1 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.692:1495) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.692:1495) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.692:1495) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=400 a3=400 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.692:1496) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.692:1496) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.692:1496) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.692:1497) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.692:1497) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.692:1497) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40 a3=40 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.692:1498) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.692:1498) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.692:1498) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=f8 a3=f8 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.708:1499) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:10.708:1499) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.708:1499) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4265 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.720:1500) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:10.720:1500) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.720:1500) : arch=i386 syscall=open success=yes exit=3 a0=80ec850 a1=8241 a2=1b6 a3=0 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.769:1501) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.769:1501) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.769:1501) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=804d008 a3=e0000 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.769:1502) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.769:1502) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.769:1502) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.773:1503) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.773:1503) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.773:1503) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.773:1504) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.773:1504) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.773:1504) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b786fbe3 a3=1fff00f0 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.773:1505) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.773:1505) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.773:1505) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=7 a3=1fff00f0 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.773:1506) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.773:1506) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.773:1506) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0280 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.773:1507) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.773:1507) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.773:1507) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0280 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1508) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1508) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1508) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1509) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1509) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1509) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1510) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1510) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1510) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0230 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1511) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1511) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1511) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=4020 a3=1fff0230 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1512) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1512) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1512) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0000 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1513) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1513) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1513) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0000 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1514) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1514) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1514) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b786fbe3 a3=1fff0070 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1515) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1515) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1515) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=6 a3=1fff0070 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1516) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1516) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1516) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7814ea8 a3=1fff0280 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1517) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1517) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1517) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff00f0 a3=1fff0280 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1518) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1518) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1518) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1519) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1519) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1519) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1520) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1520) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1520) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7814ea8 a3=1fff0230 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.780:1521) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:10.780:1521) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.780:1521) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0230 items=1 ppid=4265 pid=4266 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.804:1522) : item=0 name=/dev/fd0 inode=5929 dev=00:0e mode=block,660 ouid=root ogid=floppy rdev=02:00 
>type=CWD msg=audit(04/20/10 11:56:10.804:1522) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.804:1522) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=8e55fe8 a1=0 a2=8e55fef a3=0 items=1 ppid=4267 pid=4268 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.864:1523) : item=0 name=/dev/fd0 inode=5929 dev=00:0e mode=block,660 ouid=root ogid=floppy rdev=02:00 
>type=CWD msg=audit(04/20/10 11:56:10.864:1523) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.864:1523) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=8e55fe8 a1=0 a2=5 a3=8e55fef items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.884:1524) : item=0 name=/dev/psaux inode=2910 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:01 
>type=CWD msg=audit(04/20/10 11:56:10.884:1524) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.884:1524) : arch=i386 syscall=open success=yes exit=17 a0=b3f7e68d a1=800 a2=b3f7e682 a3=bf85e774 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:10.956:1525) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:10.956:1525) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:10.956:1525) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4270 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.092:1527) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.092:1527) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.092:1527) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4274 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.100:1528) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:11.100:1528) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.100:1528) : arch=i386 syscall=open success=yes exit=3 a0=80ec888 a1=8241 a2=1b6 a3=0 items=1 ppid=4274 pid=4275 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.116:1529) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.116:1529) :  cwd=/sys/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda 
>type=SYSCALL msg=audit(04/20/10 11:56:11.116:1529) : arch=i386 syscall=open success=yes exit=3 a0=8050469 a1=98800 a2=bffb6974 a3=0 items=1 ppid=4274 pid=4275 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lsscsi exe=/usr/bin/lsscsi key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.124:1530) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.124:1530) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.124:1530) : arch=i386 syscall=open success=yes exit=17 a0=892d548 a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.124:1531) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:11.124:1531) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.124:1531) : arch=i386 syscall=open success=yes exit=17 a0=8c77318 a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.132:1532) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:11.132:1532) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.132:1532) : arch=i386 syscall=open success=yes exit=17 a0=8c77318 a1=800 a2=0 a3=892d568 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.160:1533) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.160:1533) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.160:1533) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4276 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.201:1534) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.201:1534) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.201:1534) : arch=i386 syscall=open success=yes exit=17 a0=892d548 a1=0 a2=8da8970 a3=0 items=1 ppid=4278 pid=4279 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.209:1535) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.209:1535) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.209:1535) : arch=i386 syscall=open success=yes exit=17 a0=892d548 a1=0 a2=5 a3=8da8970 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.324:1536) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.324:1536) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.324:1536) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4280 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.056:1526) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.056:1526) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.056:1526) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4272 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.333:1537) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:11.333:1537) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.333:1537) : arch=i386 syscall=open success=yes exit=3 a0=80ec918 a1=8241 a2=1b6 a3=0 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.360:1538) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.360:1538) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.360:1538) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.360:1539) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.360:1539) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.360:1539) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.364:1540) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.364:1540) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.364:1540) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.364:1541) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.364:1541) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.364:1541) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.364:1542) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.364:1542) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.364:1542) : arch=i386 syscall=readlink success=yes exit=22 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.368:1543) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.368:1543) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.368:1543) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.368:1544) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.368:1544) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.368:1544) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.368:1545) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.368:1545) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.368:1545) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.368:1546) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.368:1546) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.368:1546) : arch=i386 syscall=readlink success=yes exit=22 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.368:1547) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.368:1547) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.368:1547) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.368:1548) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.368:1548) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.368:1548) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.368:1549) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.368:1549) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.368:1549) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1550) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1550) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1550) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1551) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1551) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1551) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1552) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1552) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1552) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1553) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1553) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1553) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1554) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1554) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1554) : arch=i386 syscall=readlink success=yes exit=19 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1555) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1555) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1555) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1556) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1556) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1556) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1557) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1557) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1557) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1558) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1558) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1558) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1559) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1559) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1559) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1560) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1560) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1560) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1561) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1561) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1561) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1562) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1562) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1562) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.372:1563) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.372:1563) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.372:1563) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1564) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1564) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1564) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1565) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1565) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1565) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1566) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1566) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1566) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1567) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1567) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1567) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1568) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1568) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1568) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1569) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1569) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1569) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1570) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1570) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1570) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1571) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1571) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1571) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.376:1572) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.376:1572) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.376:1572) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1573) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1573) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1573) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1574) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1574) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1574) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1575) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1575) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1575) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1576) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1576) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1576) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1577) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1577) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1577) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1578) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1578) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1578) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1579) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1579) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1579) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1580) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1580) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1580) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1581) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1581) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1581) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1582) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1582) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1582) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1583) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1583) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1583) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1584) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1584) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1584) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1585) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1585) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1585) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1586) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1586) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1586) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1587) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1587) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1587) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1588) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1588) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1588) : arch=i386 syscall=readlink success=yes exit=21 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1589) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1589) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1589) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1590) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1590) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1590) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1591) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1591) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1591) : arch=i386 syscall=readlink success=yes exit=14 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1592) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1592) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1592) : arch=i386 syscall=readlink success=yes exit=12 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1593) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1593) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1593) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1594) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1594) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1594) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1595) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1595) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1595) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1596) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1596) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1596) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1597) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1597) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1597) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1598) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1598) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1598) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1599) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1599) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1599) : arch=i386 syscall=readlink success=yes exit=26 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.380:1600) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.380:1600) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.380:1600) : arch=i386 syscall=readlink success=yes exit=25 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1601) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1601) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1601) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1602) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1602) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1602) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1603) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1603) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1603) : arch=i386 syscall=readlink success=yes exit=18 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1604) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1604) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1604) : arch=i386 syscall=readlink success=yes exit=26 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1605) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1605) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1605) : arch=i386 syscall=readlink success=yes exit=29 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1606) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1606) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1606) : arch=i386 syscall=readlink success=yes exit=17 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1607) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1607) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1607) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1608) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1608) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1608) : arch=i386 syscall=readlink success=yes exit=20 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1609) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1609) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1609) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1610) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1610) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1610) : arch=i386 syscall=open success=yes exit=3 a0=bfd901bc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1611) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1611) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1611) : arch=i386 syscall=readlink success=yes exit=22 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1612) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1612) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1612) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1613) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1613) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1613) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1614) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1614) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1614) : arch=i386 syscall=readlink success=yes exit=12 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1615) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1615) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1615) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1616) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1616) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1616) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1617) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1617) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1617) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1618) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1618) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1618) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1619) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1619) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1619) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1620) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1620) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1620) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1621) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1621) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1621) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1622) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1622) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1622) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.384:1623) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.384:1623) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.384:1623) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1624) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1624) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1624) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1625) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1625) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1625) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1626) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1626) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1626) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1627) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1627) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1627) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1628) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1628) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1628) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1629) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1629) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1629) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1630) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1630) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1630) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1631) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1631) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1631) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1632) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1632) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1632) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1633) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1633) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1633) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1634) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1634) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1634) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1635) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1635) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1635) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1636) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1636) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1636) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1637) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1637) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1637) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1638) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1638) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1638) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1639) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1639) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1639) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1640) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1640) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1640) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1641) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1641) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1641) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1642) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1642) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1642) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1643) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1643) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1643) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1644) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1644) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1644) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1645) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1645) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1645) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1646) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1646) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1646) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1647) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1647) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1647) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1648) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1648) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1648) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1649) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1649) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1649) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1650) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1650) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1650) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1651) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1651) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1651) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1652) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1652) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1652) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1653) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1653) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1653) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1654) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1654) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1654) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.388:1655) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.388:1655) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.388:1655) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1656) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1656) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1656) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1657) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1657) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1657) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1658) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1658) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1658) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1659) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1659) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1659) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1660) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1660) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1660) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1661) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1661) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1661) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1662) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1662) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1662) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1663) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1663) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1663) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1664) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1664) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1664) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1665) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1665) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1665) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1666) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1666) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1666) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1667) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1667) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1667) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1668) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1668) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1668) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1669) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1669) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1669) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1670) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1670) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1670) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1671) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1671) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1671) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1672) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1672) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1672) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1673) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1673) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1673) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1674) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1674) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1674) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1675) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1675) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1675) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1676) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1676) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1676) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1677) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1677) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1677) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1678) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1678) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1678) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1679) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1679) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1679) : arch=i386 syscall=readlink success=yes exit=12 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1680) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1680) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1680) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1681) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1681) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1681) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1682) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1682) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1682) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1683) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1683) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1683) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1684) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1684) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1684) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1685) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1685) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1685) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1686) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1686) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1686) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1687) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1687) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1687) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1688) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1688) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1688) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1689) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1689) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1689) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1690) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1690) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1690) : arch=i386 syscall=readlink success=yes exit=17 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1691) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1691) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1691) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.392:1692) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.392:1692) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.392:1692) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.396:1693) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.396:1693) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.396:1693) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.396:1694) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.396:1694) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.396:1694) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.396:1695) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.396:1695) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.396:1695) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.396:1696) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.396:1696) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.396:1696) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd901bc a1=bfd8fdbc a2=400 a3=ffffffff items=1 ppid=4280 pid=4281 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.420:1697) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.420:1697) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.420:1697) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4282 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.424:1698) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:11.424:1698) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.424:1698) : arch=i386 syscall=open success=yes exit=3 a0=80ec888 a1=8241 a2=1b6 a3=0 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.641:1699) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.641:1699) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.641:1699) : arch=i386 syscall=open success=yes exit=11 a0=804e208 a1=0 a2=804e238 a3=804e208 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.641:1700) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.641:1700) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.641:1700) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=b7753aae items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.641:1701) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.641:1701) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.641:1701) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.641:1702) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.641:1702) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.641:1702) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.641:1703) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.641:1703) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.641:1703) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.641:1704) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.641:1704) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.641:1704) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.641:1705) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.641:1705) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.641:1705) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1706) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1706) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1706) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1707) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1707) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1707) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1708) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1708) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1708) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1709) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1709) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1709) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffff8200 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1710) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1710) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1710) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0200 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1711) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1711) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1711) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0000 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1712) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1712) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1712) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffffe000 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1713) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1713) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1713) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffce200 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1714) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1714) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1714) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffb6200 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.645:1715) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.645:1715) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.645:1715) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffaba00 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.649:1716) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.649:1716) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.649:1716) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffa4200 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.649:1717) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.649:1717) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.649:1717) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff8e200 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.649:1718) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.649:1718) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.649:1718) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff86400 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.649:1719) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.649:1719) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.649:1719) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff84200 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.649:1720) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.649:1720) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.649:1720) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffe7e200 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.649:1721) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.649:1721) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.649:1721) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.649:1722) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.649:1722) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.649:1722) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.649:1723) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.649:1723) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.649:1723) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.652:1724) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.652:1724) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.652:1724) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.652:1725) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.652:1725) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.652:1725) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4282 pid=4283 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.732:1726) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.732:1726) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.732:1726) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.732:1727) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.732:1727) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.732:1727) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40000 a3=40000 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.736:1728) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.736:1728) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.736:1728) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=1 a3=1 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.736:1729) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.736:1729) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.736:1729) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=400 a3=400 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.736:1730) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.736:1730) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.736:1730) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.736:1731) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.736:1731) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.736:1731) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40 a3=40 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.736:1732) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.736:1732) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.736:1732) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=f8 a3=f8 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.769:1733) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.769:1733) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.769:1733) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4284 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.777:1734) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:11.777:1734) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.777:1734) : arch=i386 syscall=open success=yes exit=3 a0=80ec850 a1=8241 a2=1b6 a3=0 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.781:1735) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.781:1735) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.781:1735) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=804d008 a3=e0000 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.781:1736) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.781:1736) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.781:1736) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.781:1737) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.781:1737) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.781:1737) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.781:1738) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.781:1738) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.781:1738) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7880be3 a3=1fff00f0 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.781:1739) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.781:1739) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.781:1739) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=7 a3=1fff00f0 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.781:1740) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.781:1740) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.781:1740) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0280 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.781:1741) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.781:1741) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.781:1741) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0280 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1742) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1742) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1742) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1743) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1743) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1743) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1744) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1744) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1744) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0230 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1745) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1745) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1745) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=4020 a3=1fff0230 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1746) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1746) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1746) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0000 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1747) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1747) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1747) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0000 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1748) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1748) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1748) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7880be3 a3=1fff0070 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1749) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1749) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1749) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=6 a3=1fff0070 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1750) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1750) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1750) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7825ea8 a3=1fff0280 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1751) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1751) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1751) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff00f0 a3=1fff0280 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1752) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1752) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1752) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1753) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1753) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1753) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1754) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1754) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1754) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7825ea8 a3=1fff0230 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.797:1755) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:11.797:1755) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.797:1755) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0230 items=1 ppid=4284 pid=4285 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.825:1756) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.825:1756) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.825:1756) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4286 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.869:1757) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.869:1757) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.869:1757) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4288 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.904:1758) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.904:1758) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.904:1758) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4290 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.908:1759) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:11.908:1759) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.908:1759) : arch=i386 syscall=open success=yes exit=3 a0=80ec888 a1=8241 a2=1b6 a3=0 items=1 ppid=4290 pid=4291 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.916:1760) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:11.916:1760) :  cwd=/sys/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda 
>type=SYSCALL msg=audit(04/20/10 11:56:11.916:1760) : arch=i386 syscall=open success=yes exit=3 a0=8050469 a1=98800 a2=bfef7a54 a3=0 items=1 ppid=4290 pid=4291 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lsscsi exe=/usr/bin/lsscsi key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.924:1761) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:11.924:1761) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.924:1761) : arch=i386 syscall=open success=yes exit=17 a0=88fac00 a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.924:1762) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:11.924:1762) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.924:1762) : arch=i386 syscall=open success=yes exit=17 a0=8da4e18 a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.972:1763) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:11.972:1763) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.972:1763) : arch=i386 syscall=open success=yes exit=17 a0=8da4e18 a1=800 a2=0 a3=80596e0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:11.993:1764) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:11.993:1764) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:11.993:1764) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4292 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.025:1765) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.025:1765) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.025:1765) : arch=i386 syscall=open success=yes exit=17 a0=88fac00 a1=0 a2=892b938 a3=0 items=1 ppid=4294 pid=4295 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.052:1766) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.052:1766) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.052:1766) : arch=i386 syscall=open success=yes exit=17 a0=88fac00 a1=0 a2=5 a3=892b938 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.092:1767) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:12.092:1767) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.092:1767) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4296 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.100:1768) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:12.100:1768) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.100:1768) : arch=i386 syscall=open success=yes exit=3 a0=80ec918 a1=8241 a2=1b6 a3=0 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.116:1769) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.116:1769) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.116:1769) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.116:1770) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.116:1770) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.116:1770) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.116:1771) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.116:1771) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.116:1771) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1772) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1772) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1772) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1773) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1773) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1773) : arch=i386 syscall=readlink success=yes exit=22 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1774) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1774) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1774) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1775) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1775) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1775) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1776) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1776) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1776) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1777) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1777) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1777) : arch=i386 syscall=readlink success=yes exit=22 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1778) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1778) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1778) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1779) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1779) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1779) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1780) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1780) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1780) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1781) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1781) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1781) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.120:1782) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.120:1782) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.120:1782) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1783) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1783) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1783) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1784) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1784) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1784) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1785) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1785) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1785) : arch=i386 syscall=readlink success=yes exit=19 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1786) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1786) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1786) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1787) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1787) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1787) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1788) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1788) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1788) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1789) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1789) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1789) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1790) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1790) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1790) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1791) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1791) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1791) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1792) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1792) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1792) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1793) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1793) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1793) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1794) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1794) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1794) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.124:1795) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.124:1795) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.124:1795) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1796) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1796) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1796) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1797) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1797) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1797) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1798) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1798) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1798) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1799) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1799) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1799) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1800) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1800) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1800) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1801) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1801) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1801) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1802) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1802) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1802) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1803) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1803) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1803) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1804) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1804) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1804) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1805) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1805) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1805) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1806) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1806) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1806) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1807) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1807) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1807) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1808) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1808) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1808) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1809) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1809) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1809) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1810) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1810) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1810) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1811) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1811) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1811) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1812) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1812) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1812) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1813) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1813) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1813) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1814) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1814) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1814) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1815) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1815) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1815) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1816) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1816) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1816) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1817) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1817) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1817) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1818) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1818) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1818) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.128:1819) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.128:1819) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.128:1819) : arch=i386 syscall=readlink success=yes exit=21 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1820) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1820) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1820) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1821) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1821) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1821) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1822) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1822) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1822) : arch=i386 syscall=readlink success=yes exit=14 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1823) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1823) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1823) : arch=i386 syscall=readlink success=yes exit=12 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1824) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1824) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1824) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1825) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1825) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1825) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1826) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1826) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1826) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1827) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1827) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1827) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1828) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1828) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1828) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1829) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1829) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1829) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1830) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1830) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1830) : arch=i386 syscall=readlink success=yes exit=26 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1831) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1831) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1831) : arch=i386 syscall=readlink success=yes exit=25 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1832) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1832) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1832) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1833) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1833) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1833) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1834) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1834) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1834) : arch=i386 syscall=readlink success=yes exit=18 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1835) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1835) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1835) : arch=i386 syscall=readlink success=yes exit=26 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1836) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1836) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1836) : arch=i386 syscall=readlink success=yes exit=29 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1837) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1837) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1837) : arch=i386 syscall=readlink success=yes exit=17 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1838) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1838) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1838) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1839) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1839) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1839) : arch=i386 syscall=readlink success=yes exit=20 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1840) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1840) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1840) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1841) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1841) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1841) : arch=i386 syscall=open success=yes exit=3 a0=bf8a92cc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1842) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1842) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1842) : arch=i386 syscall=readlink success=yes exit=22 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1843) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1843) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1843) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1844) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1844) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1844) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1845) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1845) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1845) : arch=i386 syscall=readlink success=yes exit=12 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1846) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1846) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1846) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1847) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1847) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1847) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1848) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1848) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1848) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1849) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1849) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1849) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1850) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1850) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1850) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.132:1851) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.132:1851) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.132:1851) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1852) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1852) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1852) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1853) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1853) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1853) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1854) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1854) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1854) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1855) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1855) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1855) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1856) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1856) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1856) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1857) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1857) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1857) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1858) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1858) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1858) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1859) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1859) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1859) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1860) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1860) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1860) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1861) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1861) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1861) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1862) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1862) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1862) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1863) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1863) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1863) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1864) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1864) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1864) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1865) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1865) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1865) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1866) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1866) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1866) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1867) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1867) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1867) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1868) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1868) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1868) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1869) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1869) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1869) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1870) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1870) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1870) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1871) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1871) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1871) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1872) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1872) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1872) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1873) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1873) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1873) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1874) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1874) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1874) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1875) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1875) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1875) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1876) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1876) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1876) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1877) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1877) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1877) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1878) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1878) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1878) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1879) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1879) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1879) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1880) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1880) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1880) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1881) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1881) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1881) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1882) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1882) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1882) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1883) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1883) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1883) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1884) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1884) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1884) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1885) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1885) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1885) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1886) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1886) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1886) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1887) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1887) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1887) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.136:1888) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.136:1888) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.136:1888) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1889) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1889) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1889) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1890) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1890) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1890) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1891) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1891) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1891) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1892) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1892) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1892) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1893) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1893) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1893) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1894) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1894) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1894) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1895) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1895) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1895) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1896) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1896) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1896) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1897) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1897) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1897) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1898) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1898) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1898) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1899) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1899) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1899) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1900) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1900) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1900) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1901) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1901) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1901) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1902) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1902) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1902) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1903) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1903) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1903) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1904) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1904) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1904) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1905) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1905) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1905) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1906) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1906) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1906) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1907) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1907) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1907) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1908) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1908) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1908) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1909) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1909) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1909) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1910) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1910) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1910) : arch=i386 syscall=readlink success=yes exit=12 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1911) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1911) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1911) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.140:1912) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.140:1912) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.140:1912) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1913) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1913) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1913) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1914) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1914) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1914) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1915) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1915) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1915) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1916) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1916) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1916) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1917) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1917) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1917) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1918) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1918) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1918) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1919) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1919) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1919) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1920) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1920) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1920) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1921) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1921) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1921) : arch=i386 syscall=readlink success=yes exit=17 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1922) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1922) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1922) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1923) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1923) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1923) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1924) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1924) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1924) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1925) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1925) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1925) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1926) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1926) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1926) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.144:1927) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.144:1927) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.144:1927) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8a92cc a1=bf8a8ecc a2=400 a3=ffffffff items=1 ppid=4296 pid=4297 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.176:1928) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:12.176:1928) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.176:1928) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4298 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.188:1929) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:12.188:1929) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.188:1929) : arch=i386 syscall=open success=yes exit=3 a0=80ec888 a1=8241 a2=1b6 a3=0 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.213:1930) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.213:1930) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.213:1930) : arch=i386 syscall=open success=yes exit=11 a0=804e208 a1=0 a2=804e238 a3=804e208 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.213:1931) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.213:1931) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.213:1931) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=b7703aae items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.213:1932) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.213:1932) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.213:1932) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.217:1933) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.217:1933) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.217:1933) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.221:1934) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.221:1934) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.221:1934) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.221:1935) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.221:1935) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.221:1935) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.221:1936) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.221:1936) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.221:1936) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.221:1937) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.221:1937) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.221:1937) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1938) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1938) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1938) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1939) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1939) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1939) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1940) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1940) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1940) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffff8200 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1941) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1941) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1941) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0200 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1942) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1942) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1942) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0000 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1943) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1943) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1943) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffffe000 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1944) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1944) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1944) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffce200 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1945) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1945) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1945) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffb6200 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1946) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1946) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1946) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffaba00 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1947) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1947) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1947) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffa4200 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1948) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1948) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1948) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff8e200 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1949) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1949) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1949) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff86400 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1950) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1950) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1950) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff84200 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1951) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1951) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1951) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffe7e200 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1952) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1952) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1952) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1953) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1953) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1953) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1954) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1954) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1954) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1955) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1955) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1955) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.225:1956) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.225:1956) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.225:1956) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4298 pid=4299 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.325:1957) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:12.325:1957) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.325:1957) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4300 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.364:1958) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:12.364:1958) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.364:1958) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4302 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.396:1959) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:12.396:1959) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.396:1959) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4304 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.404:1960) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:12.404:1960) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.404:1960) : arch=i386 syscall=open success=yes exit=3 a0=80ec888 a1=8241 a2=1b6 a3=0 items=1 ppid=4304 pid=4305 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.412:1961) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.412:1961) :  cwd=/sys/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda 
>type=SYSCALL msg=audit(04/20/10 11:56:12.412:1961) : arch=i386 syscall=open success=yes exit=3 a0=8050469 a1=98800 a2=bff35834 a3=0 items=1 ppid=4304 pid=4305 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lsscsi exe=/usr/bin/lsscsi key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.420:1962) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.420:1962) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.420:1962) : arch=i386 syscall=open success=yes exit=17 a0=8d8a568 a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.420:1963) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:12.420:1963) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.420:1963) : arch=i386 syscall=open success=yes exit=17 a0=8e2de50 a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.420:1964) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:12.420:1964) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.420:1964) : arch=i386 syscall=open success=yes exit=17 a0=8e2de50 a1=800 a2=0 a3=892f9d0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.424:1965) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:12.424:1965) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.424:1965) : arch=i386 syscall=open success=yes exit=17 a0=8e2de50 a1=0 a2=bf85da04 a3=8e2dd08 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.468:1966) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:12.468:1966) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.468:1966) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4306 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.504:1967) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.504:1967) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.504:1967) : arch=i386 syscall=open success=yes exit=17 a0=8d8a568 a1=0 a2=8db4aa8 a3=0 items=1 ppid=4308 pid=4309 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.520:1968) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.520:1968) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.520:1968) : arch=i386 syscall=open success=yes exit=17 a0=8d8a568 a1=0 a2=5 a3=8db4aa8 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.556:1969) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:12.556:1969) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.556:1969) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4310 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.564:1970) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:12.564:1970) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.564:1970) : arch=i386 syscall=open success=yes exit=3 a0=80ec918 a1=8241 a2=1b6 a3=0 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.580:1971) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.580:1971) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.580:1971) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070570 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.580:1972) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.580:1972) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.580:1972) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070570 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.580:1973) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.580:1973) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.580:1973) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070748 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.584:1974) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.584:1974) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.584:1974) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070748 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.584:1975) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.584:1975) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.584:1975) : arch=i386 syscall=readlink success=yes exit=22 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.584:1976) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.584:1976) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.584:1976) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.584:1977) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.584:1977) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.584:1977) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.584:1978) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.584:1978) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.584:1978) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.589:1979) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.589:1979) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.589:1979) : arch=i386 syscall=readlink success=yes exit=22 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.589:1980) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.589:1980) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.589:1980) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.589:1981) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.589:1981) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.589:1981) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.589:1982) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.589:1982) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.589:1982) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.589:1983) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.589:1983) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.589:1983) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.589:1984) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.589:1984) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.589:1984) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1985) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1985) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1985) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1986) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1986) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1986) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1987) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1987) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1987) : arch=i386 syscall=readlink success=yes exit=19 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1988) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1988) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1988) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1989) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1989) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1989) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1990) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1990) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1990) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1991) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1991) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1991) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1992) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1992) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1992) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1993) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1993) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1993) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1994) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1994) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1994) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.592:1995) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.592:1995) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.592:1995) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.596:1996) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.596:1996) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.596:1996) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.596:1997) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.596:1997) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.596:1997) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.596:1998) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.596:1998) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.596:1998) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.596:1999) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.596:1999) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.596:1999) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.596:2000) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.596:2000) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.596:2000) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.596:2001) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.596:2001) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.596:2001) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2002) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2002) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2002) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2003) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2003) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2003) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2004) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2004) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2004) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2005) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2005) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2005) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2006) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2006) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2006) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2007) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2007) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2007) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2008) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2008) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2008) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2009) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2009) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2009) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2010) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2010) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2010) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2011) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2011) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2011) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2012) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2012) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2012) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2013) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2013) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2013) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2014) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2014) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2014) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2015) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2015) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2015) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2016) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2016) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2016) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2017) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2017) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2017) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2018) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2018) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2018) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2019) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2019) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2019) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2020) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2020) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2020) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2021) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2021) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2021) : arch=i386 syscall=readlink success=yes exit=21 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2022) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2022) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2022) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2023) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2023) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2023) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2024) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2024) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2024) : arch=i386 syscall=readlink success=yes exit=14 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.600:2025) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.600:2025) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.600:2025) : arch=i386 syscall=readlink success=yes exit=12 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2026) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2026) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2026) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2027) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2027) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2027) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2028) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2028) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2028) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2029) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2029) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2029) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2030) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2030) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2030) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2031) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2031) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2031) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2032) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2032) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2032) : arch=i386 syscall=readlink success=yes exit=26 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2033) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2033) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2033) : arch=i386 syscall=readlink success=yes exit=25 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2034) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2034) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2034) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2035) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2035) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2035) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2036) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2036) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2036) : arch=i386 syscall=readlink success=yes exit=18 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2037) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2037) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2037) : arch=i386 syscall=readlink success=yes exit=26 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2038) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2038) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2038) : arch=i386 syscall=readlink success=yes exit=29 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2039) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2039) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2039) : arch=i386 syscall=readlink success=yes exit=17 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2040) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2040) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2040) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2041) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2041) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2041) : arch=i386 syscall=readlink success=yes exit=20 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2042) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2042) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2042) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2043) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2043) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2043) : arch=i386 syscall=open success=yes exit=3 a0=bfbae89c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2044) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2044) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2044) : arch=i386 syscall=readlink success=yes exit=22 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2045) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2045) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2045) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2046) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2046) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2046) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2047) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2047) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2047) : arch=i386 syscall=readlink success=yes exit=12 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2048) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2048) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2048) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2049) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2049) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2049) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2050) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2050) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2050) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2051) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2051) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2051) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.604:2052) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.604:2052) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.604:2052) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.608:2053) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.608:2053) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.608:2053) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.608:2054) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.608:2054) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.608:2054) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.608:2055) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.608:2055) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.608:2055) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.608:2056) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.608:2056) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.608:2056) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.608:2057) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.608:2057) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.608:2057) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.608:2058) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.608:2058) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.608:2058) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.608:2059) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.608:2059) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.608:2059) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.608:2060) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.608:2060) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.608:2060) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2061) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2061) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2061) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2062) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2062) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2062) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2063) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2063) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2063) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2064) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2064) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2064) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2065) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2065) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2065) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2066) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2066) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2066) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2067) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2067) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2067) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2068) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2068) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2068) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2069) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2069) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2069) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2070) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2070) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2070) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2071) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2071) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2071) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2072) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2072) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2072) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2073) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2073) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2073) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2074) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2074) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2074) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2075) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2075) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2075) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2076) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2076) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2076) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2077) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2077) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2077) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2078) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2078) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2078) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2079) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2079) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2079) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2080) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2080) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2080) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.612:2081) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.612:2081) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.612:2081) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2082) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2082) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2082) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2083) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2083) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2083) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2084) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2084) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2084) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2085) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2085) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2085) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2086) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2086) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2086) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2087) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2087) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2087) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2088) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2088) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2088) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2089) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2089) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2089) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2090) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2090) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2090) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2091) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2091) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2091) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2092) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2092) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2092) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2093) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2093) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2093) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2094) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2094) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2094) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2095) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2095) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2095) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2096) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2096) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2096) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2097) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2097) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2097) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2098) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2098) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2098) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2099) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2099) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2099) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2100) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2100) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2100) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2101) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2101) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2101) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2102) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2102) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2102) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2103) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2103) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2103) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2104) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2104) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2104) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2105) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2105) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2105) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2106) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2106) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2106) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2107) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2107) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2107) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2108) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2108) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2108) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2109) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2109) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2109) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2110) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2110) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2110) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2111) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2111) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2111) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2112) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2112) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2112) : arch=i386 syscall=readlink success=yes exit=12 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2113) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2113) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2113) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2114) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2114) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2114) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.616:2115) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.616:2115) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.616:2115) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.624:2116) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.624:2116) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.624:2116) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.624:2117) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.624:2117) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.624:2117) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.624:2118) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.624:2118) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.624:2118) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.624:2119) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.624:2119) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.624:2119) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.624:2120) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.624:2120) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.624:2120) : arch=i386 syscall=readlink success=yes exit=13 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.624:2121) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.624:2121) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.624:2121) : arch=i386 syscall=readlink success=yes exit=15 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.628:2122) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.628:2122) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.628:2122) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.628:2123) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.628:2123) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.628:2123) : arch=i386 syscall=readlink success=yes exit=17 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.628:2124) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.628:2124) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.628:2124) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.628:2125) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.628:2125) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.628:2125) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.628:2126) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.628:2126) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.628:2126) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.628:2127) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.628:2127) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.628:2127) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.628:2128) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.628:2128) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.628:2128) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.628:2129) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:12.628:2129) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.628:2129) : arch=i386 syscall=readlink success=yes exit=16 a0=bfbae89c a1=bfbae49c a2=400 a3=ffffffff items=1 ppid=4310 pid=4311 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.656:2130) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:12.656:2130) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.656:2130) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4312 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.668:2131) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:12.668:2131) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.668:2131) : arch=i386 syscall=open success=yes exit=3 a0=80ec888 a1=8241 a2=1b6 a3=0 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.680:2132) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.680:2132) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.680:2132) : arch=i386 syscall=open success=yes exit=11 a0=804e208 a1=0 a2=804e238 a3=804e208 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.680:2133) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.680:2133) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.680:2133) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=b7889aae items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.680:2134) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.680:2134) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.680:2134) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.680:2135) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.680:2135) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.680:2135) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.680:2136) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.680:2136) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.680:2136) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.680:2137) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.680:2137) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.680:2137) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.680:2138) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.680:2138) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.680:2138) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2139) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2139) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2139) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2140) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2140) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2140) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2141) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2141) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2141) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2142) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2142) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2142) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffff8200 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2143) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2143) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2143) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0200 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2144) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2144) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2144) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0000 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2145) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2145) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2145) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffffe000 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2146) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2146) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2146) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffce200 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2147) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2147) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2147) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffb6200 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2148) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2148) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2148) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffaba00 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2149) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2149) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2149) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffa4200 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.685:2150) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.685:2150) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.685:2150) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff8e200 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.689:2151) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.689:2151) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.689:2151) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff86400 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.689:2152) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.689:2152) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.689:2152) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff84200 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.689:2153) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.689:2153) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.689:2153) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffe7e200 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.689:2154) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.689:2154) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.689:2154) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.693:2155) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.693:2155) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.693:2155) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.693:2156) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.693:2156) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.693:2156) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.693:2157) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.693:2157) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.693:2157) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:12.693:2158) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:12.693:2158) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:12.693:2158) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4312 pid=4313 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:13.424:2160) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:13.424:2160) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:13.424:2160) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4321 pid=4322 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:13.285:2159) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:13.285:2159) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:13.285:2159) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4315 pid=4316 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:16.096:2163) : item=0 name=/dev/rtc inode=6008 dev=00:0e mode=character,660 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:56:16.096:2163) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:16.096:2163) : arch=i386 syscall=open success=yes exit=4 a0=804fda0 a1=8000 a2=0 a3=bfa6d310 items=1 ppid=4327 pid=4328 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=hwclock exe=/sbin/hwclock key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:15.956:2161) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:15.956:2161) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:15.956:2161) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4324 pid=4325 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:16.088:2162) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:16.088:2162) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:16.088:2162) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4327 pid=4328 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.045:2165) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:17.045:2165) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.045:2165) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4330 pid=4331 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.722:2166) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.722:2166) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.722:2166) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.730:2167) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.730:2167) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.730:2167) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40000 a3=40000 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.730:2168) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.730:2168) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.730:2168) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=1 a3=1 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.730:2169) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.730:2169) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.730:2169) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=400 a3=400 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.730:2170) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.730:2170) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.730:2170) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.730:2171) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.730:2171) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.730:2171) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40 a3=40 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.730:2172) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.730:2172) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.730:2172) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=f8 a3=f8 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.749:2173) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:17.749:2173) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.749:2173) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4332 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.757:2174) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:17.757:2174) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.757:2174) : arch=i386 syscall=open success=yes exit=3 a0=80ec850 a1=8241 a2=1b6 a3=0 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.761:2175) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.761:2175) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.761:2175) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=804d008 a3=e0000 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.761:2176) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.761:2176) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.761:2176) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.761:2177) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.761:2177) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.761:2177) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.761:2178) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.761:2178) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.761:2178) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b77edbe3 a3=1fff00f0 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.761:2179) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.761:2179) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.761:2179) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=7 a3=1fff00f0 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.761:2180) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.761:2180) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.761:2180) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0280 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.761:2181) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.761:2181) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.761:2181) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0280 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2182) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2182) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2182) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2183) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2183) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2183) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2184) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2184) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2184) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0230 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2185) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2185) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2185) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=4020 a3=1fff0230 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2186) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2186) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2186) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0000 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2187) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2187) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2187) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0000 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2188) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2188) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2188) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b77edbe3 a3=1fff0070 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2189) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2189) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2189) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=6 a3=1fff0070 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2190) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2190) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2190) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7792ea8 a3=1fff0280 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2191) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2191) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2191) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff00f0 a3=1fff0280 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2192) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2192) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2192) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2193) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2193) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2193) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2194) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2194) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2194) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7792ea8 a3=1fff0230 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.773:2195) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:17.773:2195) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.773:2195) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0230 items=1 ppid=4332 pid=4333 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.805:2196) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:17.805:2196) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.805:2196) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4334 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.817:2197) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:17.817:2197) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.817:2197) : arch=i386 syscall=open success=yes exit=3 a0=80ec918 a1=8241 a2=1b6 a3=0 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.833:2198) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.833:2198) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.833:2198) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.833:2199) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.833:2199) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.833:2199) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2200) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2200) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2200) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2201) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2201) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2201) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2202) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2202) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2202) : arch=i386 syscall=readlink success=yes exit=22 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2203) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2203) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2203) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2204) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2204) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2204) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2205) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2205) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2205) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2206) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2206) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2206) : arch=i386 syscall=readlink success=yes exit=22 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2207) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2207) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2207) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.837:2208) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.837:2208) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.837:2208) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2209) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2209) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2209) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2210) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2210) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2210) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2211) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2211) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2211) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2212) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2212) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2212) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2213) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2213) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2213) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2214) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2214) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2214) : arch=i386 syscall=readlink success=yes exit=19 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2215) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2215) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2215) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2216) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2216) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2216) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2217) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2217) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2217) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2218) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2218) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2218) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2219) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2219) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2219) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2220) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2220) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2220) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2221) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2221) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2221) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2222) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2222) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2222) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.841:2223) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.841:2223) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.841:2223) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2224) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2224) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2224) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2225) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2225) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2225) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2226) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2226) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2226) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2227) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2227) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2227) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2228) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2228) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2228) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2229) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2229) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2229) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2230) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2230) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2230) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2231) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2231) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2231) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2232) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2232) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2232) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2233) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2233) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2233) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2234) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2234) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2234) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2235) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2235) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2235) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2236) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2236) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2236) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2237) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2237) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2237) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2238) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2238) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2238) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2239) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2239) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2239) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2240) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2240) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2240) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2241) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2241) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2241) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.845:2242) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.845:2242) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.845:2242) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2243) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2243) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2243) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2244) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2244) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2244) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2245) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2245) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2245) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2246) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2246) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2246) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2247) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2247) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2247) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2248) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2248) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2248) : arch=i386 syscall=readlink success=yes exit=21 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2249) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2249) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2249) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2250) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2250) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2250) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2251) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2251) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2251) : arch=i386 syscall=readlink success=yes exit=14 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2252) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2252) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2252) : arch=i386 syscall=readlink success=yes exit=12 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2253) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2253) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2253) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2254) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2254) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2254) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2255) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2255) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2255) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2256) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2256) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2256) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2257) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2257) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2257) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2258) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2258) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2258) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2259) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2259) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2259) : arch=i386 syscall=readlink success=yes exit=26 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2260) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2260) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2260) : arch=i386 syscall=readlink success=yes exit=25 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2261) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2261) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2261) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2262) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2262) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2262) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2263) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2263) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2263) : arch=i386 syscall=readlink success=yes exit=18 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2264) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2264) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2264) : arch=i386 syscall=readlink success=yes exit=26 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2265) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2265) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2265) : arch=i386 syscall=readlink success=yes exit=29 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2266) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2266) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2266) : arch=i386 syscall=readlink success=yes exit=17 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2267) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2267) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2267) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2268) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2268) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2268) : arch=i386 syscall=readlink success=yes exit=20 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.849:2269) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.849:2269) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.849:2269) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2270) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2270) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2270) : arch=i386 syscall=open success=yes exit=3 a0=bfd0c1fc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2271) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2271) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2271) : arch=i386 syscall=readlink success=yes exit=22 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2272) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2272) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2272) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2273) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2273) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2273) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2274) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2274) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2274) : arch=i386 syscall=readlink success=yes exit=12 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2275) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2275) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2275) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2276) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2276) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2276) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2277) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2277) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2277) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2278) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2278) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2278) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2279) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2279) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2279) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2280) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2280) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2280) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2281) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2281) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2281) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2282) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2282) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2282) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2283) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2283) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2283) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2284) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2284) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2284) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2285) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2285) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2285) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2286) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2286) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2286) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2287) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2287) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2287) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2288) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2288) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2288) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2289) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2289) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2289) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2290) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2290) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2290) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2291) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2291) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2291) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2292) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2292) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2292) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2293) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2293) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2293) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.853:2294) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.853:2294) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.853:2294) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2295) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2295) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2295) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2296) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2296) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2296) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2297) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2297) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2297) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2298) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2298) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2298) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2299) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2299) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2299) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2300) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2300) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2300) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2301) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2301) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2301) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2302) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2302) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2302) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2303) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2303) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2303) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2304) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2304) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2304) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2305) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2305) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2305) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2306) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2306) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2306) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2307) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2307) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2307) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2308) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2308) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2308) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2309) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2309) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2309) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2310) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2310) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2310) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2311) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2311) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2311) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2312) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2312) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2312) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2313) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2313) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2313) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2314) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2314) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2314) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2315) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2315) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2315) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2316) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2316) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2316) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2317) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2317) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2317) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2318) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2318) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2318) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2319) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2319) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2319) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2320) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2320) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2320) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2321) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2321) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2321) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2322) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2322) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2322) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2323) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2323) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2323) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2324) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2324) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2324) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2325) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2325) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2325) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2326) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2326) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2326) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2327) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2327) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2327) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2328) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2328) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2328) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2329) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2329) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2329) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.857:2330) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.857:2330) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.857:2330) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2331) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2331) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2331) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2332) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2332) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2332) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2333) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2333) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2333) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2334) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2334) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2334) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2335) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2335) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2335) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2336) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2336) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2336) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2337) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2337) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2337) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2338) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2338) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2338) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2339) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2339) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2339) : arch=i386 syscall=readlink success=yes exit=12 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2340) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2340) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2340) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2341) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2341) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2341) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2342) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2342) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2342) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2343) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2343) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2343) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2344) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2344) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2344) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2345) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2345) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2345) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2346) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2346) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2346) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2347) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2347) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2347) : arch=i386 syscall=readlink success=yes exit=13 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2348) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2348) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2348) : arch=i386 syscall=readlink success=yes exit=15 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2349) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2349) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2349) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2350) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2350) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2350) : arch=i386 syscall=readlink success=yes exit=17 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2351) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2351) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2351) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.861:2352) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.861:2352) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.861:2352) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.865:2353) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.865:2353) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.865:2353) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.865:2354) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.865:2354) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.865:2354) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.865:2355) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.865:2355) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.865:2355) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:17.865:2356) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:17.865:2356) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:17.865:2356) : arch=i386 syscall=readlink success=yes exit=16 a0=bfd0c1fc a1=bfd0bdfc a2=400 a3=ffffffff items=1 ppid=4334 pid=4335 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:22.862:2358) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:22.862:2358) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:22.862:2358) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4340 pid=4341 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:22.933:2359) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:22.933:2359) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:22.933:2359) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4346 pid=4347 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:22.810:2357) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:22.810:2357) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:22.810:2357) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4337 pid=4338 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:23.053:2360) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:23.053:2360) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:23.053:2360) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4350 pid=4351 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:24.014:2361) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:24.014:2361) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:24.014:2361) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4356 pid=4357 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:24.101:2362) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:24.101:2362) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:24.101:2362) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4362 pid=4363 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:25.766:2363) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:25.766:2363) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:25.766:2363) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4368 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.234:2364) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.234:2364) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.234:2364) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4369 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.261:2365) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.261:2365) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.261:2365) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4370 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.362:2366) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.362:2366) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.362:2366) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4371 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:27.077:2381) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:56:27.077:2381) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:27.077:2381) : arch=i386 syscall=open success=yes exit=3 a0=b7844ce4 a1=8000 a2=0 a3=bf8f5378 items=1 ppid=4147 pid=4386 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=uuidgen exe=/usr/bin/uuidgen key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:27.409:2382) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:27.409:2382) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:27.409:2382) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4387 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.406:2367) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.406:2367) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.406:2367) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4372 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.433:2368) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.433:2368) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.433:2368) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4373 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.469:2369) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.469:2369) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.469:2369) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4374 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.501:2370) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.501:2370) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.501:2370) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4375 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.545:2371) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.545:2371) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.545:2371) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4376 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.577:2372) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.577:2372) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.577:2372) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4377 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.650:2373) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.650:2373) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.650:2373) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4378 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.681:2374) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.681:2374) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.681:2374) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4379 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.801:2375) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.801:2375) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.801:2375) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4380 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.837:2376) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.837:2376) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.837:2376) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4381 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.893:2377) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.893:2377) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.893:2377) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4382 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.925:2378) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.925:2378) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.925:2378) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4383 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:26.973:2379) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:26.973:2379) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:26.973:2379) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4384 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:27.001:2380) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:27.001:2380) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:27.001:2380) : arch=i386 syscall=open success=yes exit=17 a0=b66851e5 a1=8001 a2=0 a3=0 items=1 ppid=4147 pid=4385 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:27.430:2383) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:27.430:2383) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:27.430:2383) : arch=i386 syscall=open success=yes exit=3 a0=80ebc60 a1=8241 a2=1b6 a3=a items=1 ppid=4387 pid=4390 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:27.550:2384) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:27.550:2384) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:27.550:2384) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4392 pid=4393 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:27.982:2385) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:27.982:2385) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:27.982:2385) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4394 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:28.057:2387) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:28.057:2387) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:28.057:2387) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4399 pid=4400 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:28.002:2386) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:28.002:2386) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:28.002:2386) : arch=i386 syscall=open success=yes exit=3 a0=80ebc60 a1=8241 a2=1b6 a3=a items=1 ppid=4394 pid=4397 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:28.153:2388) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:28.153:2388) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:28.153:2388) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4401 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:28.166:2389) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:28.166:2389) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:28.166:2389) : arch=i386 syscall=open success=yes exit=3 a0=80ebc60 a1=8241 a2=1b6 a3=a items=1 ppid=4401 pid=4404 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:28.206:2390) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:28.206:2390) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:28.206:2390) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4406 pid=4407 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:28.329:2391) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:28.329:2391) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:28.329:2391) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4408 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:28.341:2392) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:28.341:2392) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:28.341:2392) : arch=i386 syscall=open success=yes exit=3 a0=80ebc60 a1=8241 a2=1b6 a3=a items=1 ppid=4408 pid=4411 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:28.385:2393) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:28.385:2393) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:28.385:2393) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4413 pid=4414 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:30.901:2395) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:30.901:2395) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:30.901:2395) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4421 pid=4422 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:31.085:2396) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:31.085:2396) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:31.085:2396) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4426 pid=4427 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:31.174:2397) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:31.174:2397) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:31.174:2397) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4431 pid=4432 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:30.533:2394) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:30.533:2394) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:30.533:2394) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4416 pid=4417 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:34.533:2398) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:34.533:2398) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:34.533:2398) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4436 pid=4437 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.089:2399) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:38.089:2399) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.089:2399) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4440 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.097:2400) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:38.097:2400) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.097:2400) : arch=i386 syscall=open success=yes exit=3 a0=80ec9e0 a1=8241 a2=1b6 a3=0 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.286:2401) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.286:2401) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.286:2401) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070570 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.286:2402) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.286:2402) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.286:2402) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070570 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.290:2403) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.290:2403) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.290:2403) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070748 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.290:2404) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.290:2404) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.290:2404) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070748 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.290:2405) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.290:2405) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.290:2405) : arch=i386 syscall=readlink success=yes exit=22 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.290:2406) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.290:2406) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.290:2406) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.290:2407) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.290:2407) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.290:2407) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.290:2408) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.290:2408) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.290:2408) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.290:2409) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.290:2409) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.290:2409) : arch=i386 syscall=readlink success=yes exit=22 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.290:2410) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.290:2410) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.290:2410) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.294:2411) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.294:2411) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.294:2411) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.294:2412) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.294:2412) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.294:2412) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.294:2413) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.294:2413) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.294:2413) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.294:2414) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.294:2414) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.294:2414) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.294:2415) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.294:2415) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.294:2415) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.294:2416) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.294:2416) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.294:2416) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2417) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2417) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2417) : arch=i386 syscall=readlink success=yes exit=19 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2418) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2418) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2418) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2419) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2419) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2419) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2420) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2420) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2420) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2421) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2421) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2421) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2422) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2422) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2422) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2423) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2423) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2423) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2424) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2424) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2424) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2425) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2425) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2425) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.298:2426) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.298:2426) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.298:2426) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2427) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2427) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2427) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2428) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2428) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2428) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2429) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2429) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2429) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2430) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2430) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2430) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2431) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2431) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2431) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2432) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2432) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2432) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2433) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2433) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2433) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2434) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2434) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2434) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2435) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2435) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2435) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.302:2436) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.302:2436) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.302:2436) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2437) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2437) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2437) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2438) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2438) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2438) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2439) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2439) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2439) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2440) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2440) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2440) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2441) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2441) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2441) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2442) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2442) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2442) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2443) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2443) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2443) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2444) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2444) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2444) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2445) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2445) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2445) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2446) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2446) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2446) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2447) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2447) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2447) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2448) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2448) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2448) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2449) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2449) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2449) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.306:2450) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.306:2450) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.306:2450) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2451) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2451) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2451) : arch=i386 syscall=readlink success=yes exit=21 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2452) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2452) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2452) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2453) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2453) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2453) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2454) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2454) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2454) : arch=i386 syscall=readlink success=yes exit=14 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2455) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2455) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2455) : arch=i386 syscall=readlink success=yes exit=12 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2456) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2456) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2456) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2457) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2457) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2457) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2458) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2458) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2458) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2459) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2459) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2459) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2460) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2460) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2460) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.310:2461) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.310:2461) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.310:2461) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.314:2462) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.314:2462) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.314:2462) : arch=i386 syscall=readlink success=yes exit=26 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.314:2463) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.314:2463) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.314:2463) : arch=i386 syscall=readlink success=yes exit=25 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.314:2464) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.314:2464) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.314:2464) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.314:2465) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.314:2465) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.314:2465) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.314:2466) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.314:2466) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.314:2466) : arch=i386 syscall=readlink success=yes exit=18 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.314:2467) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.314:2467) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.314:2467) : arch=i386 syscall=readlink success=yes exit=26 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.314:2468) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.314:2468) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.314:2468) : arch=i386 syscall=readlink success=yes exit=29 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.314:2469) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.314:2469) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.314:2469) : arch=i386 syscall=readlink success=yes exit=17 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.318:2470) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.318:2470) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.318:2470) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.318:2471) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.318:2471) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.318:2471) : arch=i386 syscall=readlink success=yes exit=20 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.318:2472) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.318:2472) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.318:2472) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.318:2473) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.318:2473) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.318:2473) : arch=i386 syscall=open success=yes exit=3 a0=bf8923ec a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.318:2474) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.318:2474) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.318:2474) : arch=i386 syscall=readlink success=yes exit=22 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.318:2475) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.318:2475) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.318:2475) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.318:2476) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.318:2476) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.318:2476) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.318:2477) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.318:2477) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.318:2477) : arch=i386 syscall=readlink success=yes exit=12 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2478) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2478) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2478) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2479) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2479) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2479) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2480) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2480) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2480) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2481) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2481) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2481) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2482) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2482) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2482) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2483) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2483) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2483) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2484) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2484) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2484) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2485) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2485) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2485) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2486) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2486) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2486) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2487) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2487) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2487) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2488) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2488) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2488) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2489) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2489) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2489) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2490) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2490) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2490) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2491) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2491) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2491) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2492) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2492) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2492) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2493) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2493) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2493) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2494) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2494) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2494) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2495) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2495) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2495) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2496) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2496) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2496) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2497) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2497) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2497) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2498) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2498) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2498) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2499) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2499) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2499) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2500) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2500) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2500) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2501) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2501) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2501) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2502) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2502) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2502) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2503) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2503) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2503) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2504) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2504) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2504) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2505) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2505) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2505) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2506) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2506) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2506) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.322:2507) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.322:2507) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.322:2507) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2508) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2508) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2508) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2509) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2509) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2509) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2510) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2510) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2510) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2511) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2511) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2511) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2512) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2512) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2512) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2513) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2513) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2513) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2514) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2514) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2514) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2515) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2515) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2515) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2516) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2516) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2516) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2517) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2517) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2517) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2518) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2518) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2518) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2519) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2519) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2519) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2520) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2520) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2520) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2521) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2521) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2521) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2522) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2522) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2522) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2523) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2523) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2523) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2524) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2524) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2524) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2525) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2525) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2525) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2526) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2526) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2526) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2527) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2527) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2527) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2528) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2528) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2528) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2529) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2529) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2529) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2530) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2530) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2530) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2531) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2531) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2531) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2532) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2532) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2532) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2533) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2533) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2533) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2534) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2534) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2534) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2535) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2535) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2535) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2536) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2536) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2536) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2537) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2537) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2537) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.326:2538) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.326:2538) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.326:2538) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2539) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2539) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2539) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2540) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2540) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2540) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2541) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2541) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2541) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2542) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2542) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2542) : arch=i386 syscall=readlink success=yes exit=12 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2543) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2543) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2543) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2544) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2544) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2544) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2545) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2545) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2545) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2546) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2546) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2546) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2547) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2547) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2547) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2548) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2548) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2548) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2549) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2549) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2549) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2550) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2550) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2550) : arch=i386 syscall=readlink success=yes exit=13 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2551) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2551) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2551) : arch=i386 syscall=readlink success=yes exit=15 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2552) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2552) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2552) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2553) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2553) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2553) : arch=i386 syscall=readlink success=yes exit=17 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2554) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2554) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2554) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2555) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2555) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2555) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2556) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2556) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2556) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2557) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2557) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2557) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2558) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2558) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2558) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.330:2559) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.330:2559) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.330:2559) : arch=i386 syscall=readlink success=yes exit=16 a0=bf8923ec a1=bf891fec a2=400 a3=ffffffff items=1 ppid=4440 pid=4441 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.458:2560) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:38.458:2560) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.458:2560) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4442 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.466:2561) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:38.466:2561) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.466:2561) : arch=i386 syscall=open success=yes exit=3 a0=80ec9e0 a1=8241 a2=1b6 a3=0 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.485:2562) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.485:2562) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.485:2562) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.489:2563) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.489:2563) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.489:2563) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.489:2564) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.489:2564) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.489:2564) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.489:2565) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.489:2565) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.489:2565) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.493:2566) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.493:2566) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.493:2566) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.493:2567) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.493:2567) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.493:2567) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.493:2568) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.493:2568) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.493:2568) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.493:2569) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.493:2569) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.493:2569) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.493:2570) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.493:2570) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.493:2570) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2571) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2571) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2571) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2572) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2572) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2572) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2573) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2573) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2573) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2574) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2574) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2574) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2575) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2575) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2575) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2576) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2576) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2576) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2577) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2577) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2577) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2578) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2578) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2578) : arch=i386 syscall=readlink success=yes exit=19 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2579) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2579) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2579) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2580) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2580) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2580) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2581) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2581) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2581) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2582) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2582) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2582) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.497:2583) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.497:2583) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.497:2583) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.501:2584) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.501:2584) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.501:2584) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.501:2585) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.501:2585) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.501:2585) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.501:2586) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.501:2586) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.501:2586) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.501:2587) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.501:2587) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.501:2587) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.501:2588) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.501:2588) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.501:2588) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.501:2589) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.501:2589) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.501:2589) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.501:2590) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.501:2590) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.501:2590) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.501:2591) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.501:2591) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.501:2591) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2592) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2592) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2592) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2593) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2593) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2593) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2594) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2594) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2594) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2595) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2595) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2595) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2596) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2596) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2596) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2597) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2597) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2597) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2598) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2598) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2598) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2599) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2599) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2599) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2600) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2600) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2600) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2601) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2601) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2601) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.505:2602) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.505:2602) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.505:2602) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2603) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2603) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2603) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2604) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2604) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2604) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2605) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2605) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2605) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2606) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2606) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2606) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2607) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2607) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2607) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2608) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2608) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2608) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2609) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2609) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2609) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2610) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2610) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2610) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2611) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2611) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2611) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.509:2612) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.509:2612) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.509:2612) : arch=i386 syscall=readlink success=yes exit=21 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2613) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2613) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2613) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2614) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2614) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2614) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2615) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2615) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2615) : arch=i386 syscall=readlink success=yes exit=14 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2616) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2616) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2616) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2617) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2617) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2617) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2618) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2618) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2618) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2619) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2619) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2619) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2620) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2620) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2620) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2621) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2621) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2621) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2622) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2622) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2622) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2623) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2623) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2623) : arch=i386 syscall=readlink success=yes exit=26 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2624) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2624) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2624) : arch=i386 syscall=readlink success=yes exit=25 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2625) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2625) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2625) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2626) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2626) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2626) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2627) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2627) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2627) : arch=i386 syscall=readlink success=yes exit=18 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2628) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2628) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2628) : arch=i386 syscall=readlink success=yes exit=26 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2629) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2629) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2629) : arch=i386 syscall=readlink success=yes exit=29 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2630) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2630) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2630) : arch=i386 syscall=readlink success=yes exit=17 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.513:2631) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.513:2631) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.513:2631) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2632) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2632) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2632) : arch=i386 syscall=readlink success=yes exit=20 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2633) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2633) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2633) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2634) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2634) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2634) : arch=i386 syscall=open success=yes exit=3 a0=bf9733dc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2635) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2635) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2635) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2636) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2636) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2636) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2637) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2637) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2637) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2638) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2638) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2638) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2639) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2639) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2639) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2640) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2640) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2640) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2641) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2641) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2641) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2642) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2642) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2642) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2643) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2643) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2643) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2644) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2644) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2644) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.517:2645) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.517:2645) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.517:2645) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2646) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2646) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2646) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2647) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2647) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2647) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2648) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2648) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2648) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2649) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2649) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2649) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2650) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2650) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2650) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2651) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2651) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2651) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2652) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2652) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2652) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2653) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2653) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2653) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2654) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2654) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2654) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2655) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2655) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2655) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2656) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2656) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2656) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2657) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2657) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2657) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2658) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2658) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2658) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2659) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2659) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2659) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2660) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2660) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2660) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2661) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2661) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2661) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2662) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2662) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2662) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2663) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2663) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2663) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.521:2664) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.521:2664) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.521:2664) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2665) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2665) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2665) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2666) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2666) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2666) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2667) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2667) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2667) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2668) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2668) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2668) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2669) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2669) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2669) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2670) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2670) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2670) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2671) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2671) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2671) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2672) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2672) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2672) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2673) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2673) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2673) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2674) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2674) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2674) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2675) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2675) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2675) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2676) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2676) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2676) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2677) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2677) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2677) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2678) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2678) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2678) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2679) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2679) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2679) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2680) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2680) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2680) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2681) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2681) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2681) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2682) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2682) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2682) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.525:2683) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.525:2683) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.525:2683) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2684) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2684) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2684) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2685) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2685) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2685) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2686) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2686) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2686) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2687) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2687) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2687) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2688) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2688) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2688) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2689) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2689) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2689) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2690) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2690) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2690) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2691) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2691) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2691) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2692) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2692) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2692) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2693) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2693) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2693) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2694) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2694) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2694) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2695) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2695) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2695) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2696) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2696) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2696) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2697) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2697) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2697) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2698) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2698) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2698) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2699) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2699) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2699) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.529:2700) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.529:2700) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.529:2700) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2701) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2701) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2701) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2702) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2702) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2702) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2703) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2703) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2703) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2704) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2704) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2704) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2705) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2705) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2705) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2706) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2706) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2706) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2707) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2707) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2707) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2708) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2708) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2708) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2709) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2709) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2709) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2710) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2710) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2710) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2711) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2711) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2711) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2712) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2712) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2712) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2713) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2713) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2713) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2714) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2714) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2714) : arch=i386 syscall=readlink success=yes exit=17 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2715) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2715) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2715) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2716) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2716) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2716) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2717) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2717) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2717) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2718) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2718) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2718) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.533:2719) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.533:2719) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.533:2719) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.537:2720) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.537:2720) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.537:2720) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9733dc a1=bf972fdc a2=400 a3=ffffffff items=1 ppid=4442 pid=4443 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.601:2721) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.601:2721) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.601:2721) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.605:2722) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.605:2722) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.605:2722) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40000 a3=40000 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.605:2723) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.605:2723) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.605:2723) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=1 a3=1 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.605:2724) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.605:2724) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.605:2724) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=400 a3=400 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.605:2725) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.605:2725) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.605:2725) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.605:2726) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.605:2726) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.605:2726) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40 a3=40 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.605:2727) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.605:2727) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.605:2727) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=f8 a3=f8 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.634:2728) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:38.634:2728) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.634:2728) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4444 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.638:2729) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:38.638:2729) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.638:2729) : arch=i386 syscall=open success=yes exit=3 a0=80ec918 a1=8241 a2=1b6 a3=0 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.665:2730) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.665:2730) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.665:2730) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=804d008 a3=e0000 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.665:2731) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.665:2731) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.665:2731) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.665:2732) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.665:2732) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.665:2732) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.665:2733) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.665:2733) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.665:2733) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7846be3 a3=1fff00f0 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.669:2734) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.669:2734) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.669:2734) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=7 a3=1fff00f0 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.669:2735) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.669:2735) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.669:2735) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0280 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.669:2736) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.669:2736) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.669:2736) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0280 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2737) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2737) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2737) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2738) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2738) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2738) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2739) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2739) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2739) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0230 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2740) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2740) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2740) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=4020 a3=1fff0230 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2741) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2741) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2741) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0000 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2742) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2742) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2742) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0000 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2743) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2743) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2743) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b7846be3 a3=1fff0070 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2744) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2744) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2744) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=6 a3=1fff0070 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2745) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2745) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2745) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b77ebea8 a3=1fff0280 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2746) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2746) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2746) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff00f0 a3=1fff0280 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2747) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2747) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2747) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.685:2748) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.685:2748) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.685:2748) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.689:2749) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.689:2749) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.689:2749) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b77ebea8 a3=1fff0230 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.689:2750) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:38.689:2750) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.689:2750) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0230 items=1 ppid=4444 pid=4445 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.717:2751) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:38.717:2751) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.717:2751) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4446 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.725:2752) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:38.725:2752) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.725:2752) : arch=i386 syscall=open success=yes exit=3 a0=80ec9e0 a1=8241 a2=1b6 a3=0 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.741:2753) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.741:2753) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.741:2753) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.741:2754) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.741:2754) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.741:2754) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070570 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.746:2755) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.746:2755) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.746:2755) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.746:2756) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.746:2756) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.746:2756) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070748 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.746:2757) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.746:2757) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.746:2757) : arch=i386 syscall=readlink success=yes exit=22 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.746:2758) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.746:2758) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.746:2758) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2759) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2759) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2759) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2760) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2760) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2760) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2761) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2761) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2761) : arch=i386 syscall=readlink success=yes exit=22 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2762) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2762) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2762) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2763) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2763) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2763) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2764) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2764) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2764) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2765) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2765) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2765) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2766) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2766) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2766) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2767) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2767) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2767) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2768) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2768) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2768) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2769) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2769) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2769) : arch=i386 syscall=readlink success=yes exit=19 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2770) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2770) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2770) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2771) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2771) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2771) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2772) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2772) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2772) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2773) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2773) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2773) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.749:2774) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.749:2774) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.749:2774) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2775) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2775) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2775) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2776) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2776) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2776) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2777) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2777) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2777) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2778) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2778) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2778) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2779) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2779) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2779) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2780) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2780) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2780) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2781) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2781) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2781) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2782) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2782) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2782) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2783) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2783) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2783) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2784) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2784) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2784) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.753:2785) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.753:2785) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.753:2785) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2786) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2786) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2786) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2787) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2787) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2787) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2788) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2788) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2788) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2789) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2789) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2789) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2790) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2790) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2790) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2791) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2791) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2791) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2792) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2792) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2792) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2793) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2793) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2793) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2794) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2794) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2794) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2795) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2795) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2795) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2796) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2796) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2796) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2797) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2797) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2797) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2798) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2798) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2798) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2799) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2799) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2799) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2800) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2800) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2800) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2801) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2801) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2801) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2802) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2802) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2802) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2803) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2803) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2803) : arch=i386 syscall=readlink success=yes exit=21 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2804) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2804) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2804) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2805) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2805) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2805) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2806) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2806) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2806) : arch=i386 syscall=readlink success=yes exit=14 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2807) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2807) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2807) : arch=i386 syscall=readlink success=yes exit=12 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2808) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2808) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2808) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2809) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2809) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2809) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2810) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2810) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2810) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2811) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2811) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2811) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2812) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2812) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2812) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.757:2813) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.757:2813) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.757:2813) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2814) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2814) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2814) : arch=i386 syscall=readlink success=yes exit=26 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2815) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2815) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2815) : arch=i386 syscall=readlink success=yes exit=25 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2816) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2816) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2816) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2817) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2817) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2817) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2818) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2818) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2818) : arch=i386 syscall=readlink success=yes exit=18 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2819) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2819) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2819) : arch=i386 syscall=readlink success=yes exit=26 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2820) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2820) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2820) : arch=i386 syscall=readlink success=yes exit=29 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2821) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2821) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2821) : arch=i386 syscall=readlink success=yes exit=17 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2822) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2822) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2822) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2823) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2823) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2823) : arch=i386 syscall=readlink success=yes exit=20 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2824) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2824) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2824) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2825) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2825) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2825) : arch=i386 syscall=open success=yes exit=3 a0=bffecfdc a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2826) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2826) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2826) : arch=i386 syscall=readlink success=yes exit=22 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2827) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2827) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2827) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2828) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2828) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2828) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2829) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2829) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2829) : arch=i386 syscall=readlink success=yes exit=12 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2830) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2830) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2830) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2831) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2831) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2831) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2832) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2832) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2832) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2833) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2833) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2833) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2834) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2834) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2834) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2835) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2835) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2835) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2836) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2836) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2836) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2837) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2837) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2837) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2838) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2838) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2838) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2839) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2839) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2839) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2840) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2840) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2840) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2841) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2841) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2841) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2842) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2842) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2842) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2843) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2843) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2843) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2844) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2844) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2844) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2845) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2845) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2845) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.761:2846) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.761:2846) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.761:2846) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2847) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2847) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2847) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2848) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2848) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2848) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2849) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2849) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2849) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2850) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2850) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2850) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2851) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2851) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2851) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2852) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2852) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2852) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2853) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2853) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2853) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2854) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2854) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2854) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2855) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2855) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2855) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2856) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2856) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2856) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2857) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2857) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2857) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2858) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2858) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2858) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2859) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2859) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2859) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2860) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2860) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2860) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2861) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2861) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2861) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2862) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2862) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2862) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2863) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2863) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2863) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2864) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2864) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2864) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2865) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2865) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2865) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2866) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2866) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2866) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2867) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2867) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2867) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2868) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2868) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2868) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2869) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2869) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2869) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2870) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2870) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2870) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2871) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2871) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2871) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2872) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2872) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2872) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2873) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2873) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2873) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2874) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2874) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2874) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2875) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2875) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2875) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2876) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2876) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2876) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2877) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2877) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2877) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2878) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2878) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2878) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2879) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2879) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2879) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2880) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2880) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2880) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.765:2881) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.765:2881) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.765:2881) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2882) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2882) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2882) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2883) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2883) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2883) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2884) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2884) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2884) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2885) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2885) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2885) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2886) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2886) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2886) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2887) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2887) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2887) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2888) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2888) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2888) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2889) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2889) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2889) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2890) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2890) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2890) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2891) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2891) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2891) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2892) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2892) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2892) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2893) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2893) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2893) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2894) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2894) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2894) : arch=i386 syscall=readlink success=yes exit=12 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2895) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2895) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2895) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2896) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2896) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2896) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2897) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2897) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2897) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2898) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2898) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2898) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2899) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2899) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2899) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2900) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2900) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2900) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2901) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2901) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2901) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2902) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2902) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2902) : arch=i386 syscall=readlink success=yes exit=13 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2903) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2903) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2903) : arch=i386 syscall=readlink success=yes exit=15 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2904) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2904) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2904) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2905) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2905) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2905) : arch=i386 syscall=readlink success=yes exit=17 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2906) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2906) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2906) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2907) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2907) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2907) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.769:2908) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.769:2908) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.769:2908) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.777:2909) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.777:2909) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.777:2909) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.777:2910) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.777:2910) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.777:2910) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:38.777:2911) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:38.777:2911) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:38.777:2911) : arch=i386 syscall=readlink success=yes exit=16 a0=bffecfdc a1=bffecbdc a2=400 a3=ffffffff items=1 ppid=4446 pid=4447 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.134:2912) : item=0 name=/dev/nvram inode=2907 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=0a:90 
>type=CWD msg=audit(04/20/10 11:56:39.134:2912) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.134:2912) : arch=i386 syscall=open success=yes exit=17 a0=b3f79eca a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.134:2913) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.134:2913) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.134:2913) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.138:2914) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.138:2914) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.138:2914) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40000 a3=40000 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.138:2915) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.138:2915) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.138:2915) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=1 a3=1 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.138:2916) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.138:2916) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.138:2916) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=400 a3=400 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.138:2917) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.138:2917) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.138:2917) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=100 a3=100 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.138:2918) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.138:2918) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.138:2918) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=40 a3=40 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.138:2919) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.138:2919) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.138:2919) : arch=i386 syscall=open success=yes exit=17 a0=b3f41478 a1=0 a2=f8 a3=f8 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.157:2920) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:39.157:2920) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.157:2920) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4448 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.161:2921) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:39.161:2921) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.161:2921) : arch=i386 syscall=open success=yes exit=3 a0=80ec918 a1=8241 a2=1b6 a3=0 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.165:2922) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.165:2922) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.165:2922) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=804d008 a3=e0000 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.165:2923) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.165:2923) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.165:2923) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.169:2924) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.169:2924) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.169:2924) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0030 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.169:2925) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.169:2925) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.169:2925) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b772dbe3 a3=1fff00f0 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.169:2926) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.169:2926) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.169:2926) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=7 a3=1fff00f0 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.169:2927) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.169:2927) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.169:2927) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0280 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.169:2928) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.169:2928) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.169:2928) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0280 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.178:2929) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.178:2929) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.178:2929) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.178:2930) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.178:2930) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.178:2930) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.178:2931) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.178:2931) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.178:2931) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0230 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.178:2932) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.178:2932) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.178:2932) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=4020 a3=1fff0230 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.178:2933) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.178:2933) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.178:2933) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0000 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2934) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2934) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2934) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=0 a3=1fff0000 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2935) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2935) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2935) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b772dbe3 a3=1fff0070 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2936) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2936) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2936) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=6 a3=1fff0070 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2937) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2937) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2937) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b76d2ea8 a3=1fff0280 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2938) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2938) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2938) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff00f0 a3=1fff0280 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2939) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2939) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2939) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=19 a3=1fff01f0 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2940) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2940) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2940) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1fff0280 a3=1fff01f0 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2941) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2941) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2941) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=b76d2ea8 a3=1fff0230 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.181:2942) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:56:39.181:2942) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.181:2942) : arch=i386 syscall=open success=yes exit=3 a0=8049dba a1=0 a2=1 a3=1fff0230 items=1 ppid=4448 pid=4449 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=acpidump exe=/usr/sbin/acpidump key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.253:2943) : item=0 name=/dev/fd0 inode=5929 dev=00:0e mode=block,660 ouid=root ogid=floppy rdev=02:00 
>type=CWD msg=audit(04/20/10 11:56:39.253:2943) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.253:2943) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=97a81a0 a1=0 a2=97a81a7 a3=0 items=1 ppid=4450 pid=4451 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.306:2944) : item=0 name=/dev/fd0 inode=5929 dev=00:0e mode=block,660 ouid=root ogid=floppy rdev=02:00 
>type=CWD msg=audit(04/20/10 11:56:39.306:2944) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.306:2944) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=97a81a0 a1=0 a2=5 a3=97a81a7 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.330:2945) : item=0 name=/dev/psaux inode=2910 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:01 
>type=CWD msg=audit(04/20/10 11:56:39.330:2945) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.330:2945) : arch=i386 syscall=open success=yes exit=17 a0=b3f7e68d a1=800 a2=b3f7e682 a3=bf85d544 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.382:2946) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:39.382:2946) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.382:2946) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4452 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.449:2947) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:39.449:2947) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.449:2947) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4454 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.505:2948) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:39.505:2948) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.505:2948) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4456 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.513:2949) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:39.513:2949) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.513:2949) : arch=i386 syscall=open success=yes exit=3 a0=80ec950 a1=8241 a2=1b6 a3=0 items=1 ppid=4456 pid=4457 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.529:2950) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.529:2950) :  cwd=/sys/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda 
>type=SYSCALL msg=audit(04/20/10 11:56:39.529:2950) : arch=i386 syscall=open success=yes exit=3 a0=8050469 a1=98800 a2=bf8b5a54 a3=0 items=1 ppid=4456 pid=4457 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lsscsi exe=/usr/bin/lsscsi key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.541:2951) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:39.541:2951) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.541:2951) : arch=i386 syscall=open success=yes exit=17 a0=afbbf2c0 a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.541:2952) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:39.541:2952) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.541:2952) : arch=i386 syscall=open success=yes exit=17 a0=afbd48d0 a1=800 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.545:2953) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:56:39.545:2953) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.545:2953) : arch=i386 syscall=open success=yes exit=17 a0=afbd48d0 a1=800 a2=0 a3=afbd4710 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.569:2954) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:39.569:2954) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.569:2954) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4458 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.618:2955) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:39.618:2955) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.618:2955) : arch=i386 syscall=open success=yes exit=17 a0=afbbf2c0 a1=0 a2=afb29620 a3=0 items=1 ppid=4460 pid=4461 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.626:2956) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:39.626:2956) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.626:2956) : arch=i386 syscall=open success=yes exit=17 a0=afbbf2c0 a1=0 a2=5 a3=afb29620 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.725:2957) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:39.725:2957) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.725:2957) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4462 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.729:2958) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:39.729:2958) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.729:2958) : arch=i386 syscall=open success=yes exit=3 a0=80ec9e0 a1=8241 a2=1b6 a3=0 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.746:2959) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.746:2959) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.746:2959) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070570 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.746:2960) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.746:2960) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.746:2960) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070570 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.749:2961) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.749:2961) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.749:2961) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070748 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.749:2962) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.749:2962) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.749:2962) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070748 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.749:2963) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.749:2963) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.749:2963) : arch=i386 syscall=readlink success=yes exit=22 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.749:2964) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.749:2964) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.749:2964) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.749:2965) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.749:2965) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.749:2965) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.753:2966) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.753:2966) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.753:2966) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.753:2967) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.753:2967) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.753:2967) : arch=i386 syscall=readlink success=yes exit=22 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.753:2968) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.753:2968) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.753:2968) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.753:2969) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.753:2969) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.753:2969) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.753:2970) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.753:2970) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.753:2970) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.753:2971) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.753:2971) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.753:2971) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2972) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2972) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2972) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2973) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2973) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2973) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2974) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2974) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2974) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2975) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2975) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2975) : arch=i386 syscall=readlink success=yes exit=19 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2976) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2976) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2976) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2977) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2977) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2977) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2978) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2978) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2978) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2979) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2979) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2979) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.757:2980) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.757:2980) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.757:2980) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.761:2981) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.761:2981) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.761:2981) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.761:2982) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.761:2982) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.761:2982) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.761:2983) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.761:2983) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.761:2983) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.761:2984) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.761:2984) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.761:2984) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.761:2985) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.761:2985) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.761:2985) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2986) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2986) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2986) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2987) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2987) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2987) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2988) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2988) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2988) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2989) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2989) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2989) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2990) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2990) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2990) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2991) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2991) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2991) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2992) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2992) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2992) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2993) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2993) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2993) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2994) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2994) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2994) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.765:2995) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.765:2995) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.765:2995) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:2996) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:2996) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:2996) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:2997) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:2997) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:2997) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:2998) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:2998) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:2998) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:2999) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:2999) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:2999) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:3000) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:3000) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:3000) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:3001) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:3001) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:3001) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:3002) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:3002) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:3002) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:3003) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:3003) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:3003) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.769:3004) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.769:3004) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.769:3004) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3005) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3005) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3005) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3006) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3006) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3006) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3007) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3007) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3007) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3008) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3008) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3008) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3009) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3009) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3009) : arch=i386 syscall=readlink success=yes exit=21 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3010) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3010) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3010) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3011) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3011) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3011) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3012) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3012) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3012) : arch=i386 syscall=readlink success=yes exit=14 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3013) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3013) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3013) : arch=i386 syscall=readlink success=yes exit=12 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.773:3014) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.773:3014) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.773:3014) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3015) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3015) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3015) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3016) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3016) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3016) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3017) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3017) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3017) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3018) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3018) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3018) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3019) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3019) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3019) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3020) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3020) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3020) : arch=i386 syscall=readlink success=yes exit=26 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3021) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3021) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3021) : arch=i386 syscall=readlink success=yes exit=25 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3022) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3022) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3022) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3023) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3023) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3023) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3024) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3024) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3024) : arch=i386 syscall=readlink success=yes exit=18 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.777:3025) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.777:3025) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.777:3025) : arch=i386 syscall=readlink success=yes exit=26 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3026) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3026) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3026) : arch=i386 syscall=readlink success=yes exit=29 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3027) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3027) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3027) : arch=i386 syscall=readlink success=yes exit=17 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3028) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3028) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3028) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3029) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3029) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3029) : arch=i386 syscall=readlink success=yes exit=20 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3030) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3030) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3030) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3031) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3031) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3031) : arch=i386 syscall=open success=yes exit=3 a0=bfca7dac a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3032) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3032) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3032) : arch=i386 syscall=readlink success=yes exit=22 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3033) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3033) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3033) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3034) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3034) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3034) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3035) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3035) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3035) : arch=i386 syscall=readlink success=yes exit=12 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.781:3036) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.781:3036) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.781:3036) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.785:3037) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.785:3037) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.785:3037) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.785:3038) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.785:3038) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.785:3038) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.785:3039) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.785:3039) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.785:3039) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.785:3040) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.785:3040) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.785:3040) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.785:3041) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.785:3041) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.785:3041) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.785:3042) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.785:3042) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.785:3042) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.785:3043) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.785:3043) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.785:3043) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3044) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3044) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3044) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3045) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3045) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3045) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3046) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3046) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3046) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3047) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3047) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3047) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3048) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3048) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3048) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3049) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3049) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3049) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3050) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3050) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3050) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3051) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3051) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3051) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.789:3052) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.789:3052) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.789:3052) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3053) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3053) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3053) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3054) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3054) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3054) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3055) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3055) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3055) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3056) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3056) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3056) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3057) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3057) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3057) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3058) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3058) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3058) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3059) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3059) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3059) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3060) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3060) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3060) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3061) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3061) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3061) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3062) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3062) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3062) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3063) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3063) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3063) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.793:3064) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.793:3064) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.793:3064) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3065) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3065) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3065) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3066) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3066) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3066) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3067) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3067) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3067) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3068) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3068) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3068) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3069) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3069) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3069) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3070) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3070) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3070) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3071) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3071) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3071) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3072) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3072) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3072) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3073) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3073) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3073) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3074) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3074) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3074) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.797:3075) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.797:3075) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.797:3075) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3076) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3076) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3076) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3077) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3077) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3077) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3078) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3078) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3078) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3079) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3079) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3079) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3080) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3080) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3080) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3081) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3081) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3081) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3082) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3082) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3082) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3083) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3083) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3083) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3084) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3084) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3084) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.801:3085) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.801:3085) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.801:3085) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3086) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3086) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3086) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3087) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3087) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3087) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3088) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3088) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3088) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3089) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3089) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3089) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3090) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3090) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3090) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3091) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3091) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3091) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3092) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3092) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3092) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3093) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3093) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3093) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.806:3094) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.806:3094) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.806:3094) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3095) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3095) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3095) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3096) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3096) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3096) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3097) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3097) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3097) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3098) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3098) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3098) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3099) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3099) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3099) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3100) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3100) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3100) : arch=i386 syscall=readlink success=yes exit=12 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3101) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3101) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3101) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3102) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3102) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3102) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3103) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3103) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3103) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3104) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3104) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3104) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3105) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3105) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3105) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.809:3106) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.809:3106) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.809:3106) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3107) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3107) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3107) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3108) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3108) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3108) : arch=i386 syscall=readlink success=yes exit=13 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3109) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3109) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3109) : arch=i386 syscall=readlink success=yes exit=15 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3110) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3110) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3110) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3111) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3111) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3111) : arch=i386 syscall=readlink success=yes exit=17 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3112) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3112) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3112) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3113) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3113) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3113) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3114) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3114) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3114) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3115) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3115) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3115) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3116) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3116) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3116) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.813:3117) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:39.813:3117) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.813:3117) : arch=i386 syscall=readlink success=yes exit=16 a0=bfca7dac a1=bfca79ac a2=400 a3=ffffffff items=1 ppid=4462 pid=4463 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.949:3118) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:39.949:3118) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.949:3118) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4464 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:39.957:3119) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:39.957:3119) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:39.957:3119) : arch=i386 syscall=open success=yes exit=3 a0=80ec950 a1=8241 a2=1b6 a3=0 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.070:3120) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.070:3120) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.070:3120) : arch=i386 syscall=open success=yes exit=11 a0=804e208 a1=0 a2=804e238 a3=804e208 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.070:3121) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.070:3121) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.070:3121) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=b7820aae items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.070:3122) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.070:3122) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.070:3122) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.070:3123) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.070:3123) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.070:3123) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.070:3124) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.070:3124) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.070:3124) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.070:3125) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.070:3125) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.070:3125) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.070:3126) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.070:3126) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.070:3126) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.070:3127) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.070:3127) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.070:3127) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.074:3128) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.074:3128) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.074:3128) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.074:3129) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.074:3129) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.074:3129) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.074:3130) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.074:3130) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.074:3130) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffff8200 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.074:3131) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.074:3131) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.074:3131) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0200 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.074:3132) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.074:3132) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.074:3132) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffe0000 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.074:3133) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.074:3133) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.074:3133) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffffe000 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.074:3134) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.074:3134) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.074:3134) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffce200 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.078:3135) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.078:3135) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.078:3135) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffb6200 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.078:3136) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.078:3136) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.078:3136) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffaba00 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.078:3137) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.078:3137) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.078:3137) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fffa4200 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.078:3138) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.078:3138) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.078:3138) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff8e200 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.078:3139) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.078:3139) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.078:3139) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff86400 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.078:3140) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.078:3140) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.078:3140) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=fff84200 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.078:3141) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.078:3141) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.078:3141) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=ffe7e200 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.078:3142) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.078:3142) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.078:3142) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.082:3143) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.082:3143) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.082:3143) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.082:3144) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.082:3144) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.082:3144) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.082:3145) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.082:3145) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.082:3145) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804f378 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.082:3146) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.082:3146) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.082:3146) : arch=i386 syscall=open success=yes exit=4 a0=804e218 a1=0 a2=180 a3=804e260 items=1 ppid=4464 pid=4465 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmraid exe=/sbin/dmraid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.122:3147) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.122:3147) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.122:3147) : arch=i386 syscall=open success=yes exit=17 a0=97a6dac a1=8000 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.181:3148) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:40.181:3148) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.181:3148) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4466 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.189:3149) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:40.189:3149) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.189:3149) : arch=i386 syscall=open success=yes exit=3 a0=80ecec0 a1=8241 a2=1b6 a3=0 items=1 ppid=4466 pid=4467 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.318:3150) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.318:3150) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.318:3150) : arch=i386 syscall=open success=yes exit=3 a0=bfe29513 a1=8000 a2=0 a3=200 items=1 ppid=4466 pid=4467 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dd exe=/bin/dd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.397:3151) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:40.397:3151) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.397:3151) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4470 pid=4471 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.717:3152) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:40.717:3152) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.717:3152) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4474 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.721:3153) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:40.721:3153) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.721:3153) : arch=i386 syscall=open success=yes exit=3 a0=80ec9e0 a1=8241 a2=1b6 a3=0 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.737:3154) : item=0 name=/dev/.udev/db/input:event2 inode=5909 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.737:3154) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.737:3154) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070570 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.737:3155) : item=0 name=/dev/.udev/db/input:event3 inode=5899 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.737:3155) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.737:3155) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070570 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.741:3156) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.741:3156) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.741:3156) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070748 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.741:3157) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.741:3157) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.741:3157) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070748 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.741:3158) : item=0 name=/dev/.udev/db/bsg:2:0:0:0 inode=5795 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.741:3158) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.741:3158) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.741:3159) : item=0 name=/dev/.udev/db/scsi_generic:sg1 inode=5798 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.741:3159) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.741:3159) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.746:3160) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.746:3160) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.746:3160) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.746:3161) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.746:3161) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.746:3161) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.746:3162) : item=0 name=/dev/.udev/db/bsg:0:0:0:0 inode=5817 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.746:3162) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.746:3162) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.746:3163) : item=0 name=/dev/.udev/db/scsi_generic:sg0 inode=5814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.746:3163) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.746:3163) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.746:3164) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.746:3164) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.746:3164) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.746:3165) : item=0 name=/dev/.udev/db/serio:serio0 inode=5364 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.746:3165) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.746:3165) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.746:3166) : item=0 name=/dev/.udev/db/input:event1 inode=5848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.746:3166) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.746:3166) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3167) : item=0 name=/dev/.udev/db/input:event0 inode=5865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3167) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3167) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3168) : item=0 name=/dev/.udev/db/input:mouse0 inode=5859 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3168) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3168) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3169) : item=0 name=/dev/.udev/db/input:event4 inode=5944 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3169) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3169) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3170) : item=0 name=/dev/.udev/db/rtc:rtc0 inode=6007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3170) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3170) : arch=i386 syscall=readlink success=yes exit=19 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3171) : item=0 name=/dev/.udev/db/tty:ttyS0 inode=5368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3171) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3171) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3172) : item=0 name=/dev/.udev/db/tty:ttyS1 inode=5370 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3172) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3172) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3173) : item=0 name=/dev/.udev/db/tty:ttyS2 inode=5372 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3173) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3173) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3174) : item=0 name=/dev/.udev/db/tty:ttyS3 inode=5374 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3174) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3174) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3175) : item=0 name=/dev/.udev/db/tty:ttyS4 inode=5376 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3175) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3175) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3176) : item=0 name=/dev/.udev/db/tty:ttyS5 inode=5378 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3176) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3176) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3177) : item=0 name=/dev/.udev/db/tty:ttyS6 inode=5380 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3177) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3177) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3178) : item=0 name=/dev/.udev/db/tty:ttyS7 inode=5382 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3178) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3178) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3179) : item=0 name=/dev/.udev/db/graphics:fb0 inode=5385 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3179) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3179) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.749:3180) : item=0 name=/dev/.udev/db/block:loop0 inode=5789 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.749:3180) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.749:3180) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3181) : item=0 name=/dev/.udev/db/block:loop1 inode=5453 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3181) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3181) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3182) : item=0 name=/dev/.udev/db/block:loop2 inode=5458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3182) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3182) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3183) : item=0 name=/dev/.udev/db/block:loop3 inode=5465 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3183) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3183) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3184) : item=0 name=/dev/.udev/db/block:loop4 inode=5446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3184) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3184) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3185) : item=0 name=/dev/.udev/db/block:loop5 inode=5481 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3185) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3185) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3186) : item=0 name=/dev/.udev/db/block:loop6 inode=5543 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3186) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3186) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3187) : item=0 name=/dev/.udev/db/block:loop7 inode=5486 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3187) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3187) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3188) : item=0 name=/dev/.udev/db/block:ram0 inode=5514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3188) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3188) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3189) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3189) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3189) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3190) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3190) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3190) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3191) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3191) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3191) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3192) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3192) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3192) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3193) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3193) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3193) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3194) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3194) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3194) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3195) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3195) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3195) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3196) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3196) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3196) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3197) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3197) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3197) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.753:3198) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.753:3198) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.753:3198) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3199) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3199) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3199) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3200) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3200) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3200) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3201) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3201) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3201) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3202) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3202) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3202) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3203) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3203) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3203) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3204) : item=0 name=/dev/.udev/db/input:mice inode=5777 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3204) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3204) : arch=i386 syscall=readlink success=yes exit=21 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3205) : item=0 name=/dev/.udev/db/mem:full inode=5515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3205) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3205) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3206) : item=0 name=/dev/.udev/db/mem:kmem inode=5517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3206) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3206) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3207) : item=0 name=/dev/.udev/db/mem:kmsg inode=5519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3207) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3207) : arch=i386 syscall=readlink success=yes exit=14 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3208) : item=0 name=/dev/.udev/db/mem:mem inode=5521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3208) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3208) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3209) : item=0 name=/dev/.udev/db/mem:null inode=5523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3209) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3209) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3210) : item=0 name=/dev/.udev/db/mem:oldmem inode=5525 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3210) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3210) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3211) : item=0 name=/dev/.udev/db/mem:port inode=5527 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3211) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3211) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3212) : item=0 name=/dev/.udev/db/mem:random inode=5529 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3212) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3212) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3213) : item=0 name=/dev/.udev/db/mem:urandom inode=5531 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3213) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3213) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3214) : item=0 name=/dev/.udev/db/mem:zero inode=5533 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3214) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3214) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3215) : item=0 name=/dev/.udev/db/misc:cpu_dma_latency inode=5535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3215) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3215) : arch=i386 syscall=readlink success=yes exit=26 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3216) : item=0 name=/dev/.udev/db/misc:device-mapper inode=5538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3216) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3216) : arch=i386 syscall=readlink success=yes exit=25 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3217) : item=0 name=/dev/.udev/db/misc:fuse inode=5544 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3217) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3217) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3218) : item=0 name=/dev/.udev/db/misc:hpet inode=5546 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3218) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3218) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3219) : item=0 name=/dev/.udev/db/misc:mcelog inode=5548 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3219) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3219) : arch=i386 syscall=readlink success=yes exit=18 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3220) : item=0 name=/dev/.udev/db/misc:network_latency inode=5550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3220) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3220) : arch=i386 syscall=readlink success=yes exit=26 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3221) : item=0 name=/dev/.udev/db/misc:network_throughput inode=5552 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3221) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3221) : arch=i386 syscall=readlink success=yes exit=29 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.758:3222) : item=0 name=/dev/.udev/db/misc:nvram inode=5554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.758:3222) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.758:3222) : arch=i386 syscall=readlink success=yes exit=17 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3223) : item=0 name=/dev/.udev/db/misc:psaux inode=5556 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3223) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3223) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3224) : item=0 name=/dev/.udev/db/misc:snapshot inode=5558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3224) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3224) : arch=i386 syscall=readlink success=yes exit=20 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3225) : item=0 name=/dev/.udev/db/misc:vboxguest inode=5875 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3225) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3225) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3226) : item=0 name=/dev/.udev/db/misc:vboxuser inode=5881 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3226) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3226) : arch=i386 syscall=open success=yes exit=3 a0=bf9f461c a1=8000 a2=1b6 a3=8070f88 items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3227) : item=0 name=/dev/.udev/db/misc:vga_arbiter inode=5560 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3227) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3227) : arch=i386 syscall=readlink success=yes exit=22 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3228) : item=0 name=/dev/.udev/db/tty:console inode=5563 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3228) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3228) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3229) : item=0 name=/dev/.udev/db/tty:ptmx inode=5565 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3229) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3229) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3230) : item=0 name=/dev/.udev/db/tty:tty inode=5567 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3230) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3230) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3231) : item=0 name=/dev/.udev/db/tty:tty0 inode=5569 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3231) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3231) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3232) : item=0 name=/dev/.udev/db/tty:tty1 inode=5571 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3232) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3232) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3233) : item=0 name=/dev/.udev/db/tty:tty10 inode=5573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3233) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3233) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3234) : item=0 name=/dev/.udev/db/tty:tty11 inode=5575 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3234) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3234) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3235) : item=0 name=/dev/.udev/db/tty:tty12 inode=5577 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3235) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3235) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3236) : item=0 name=/dev/.udev/db/tty:tty13 inode=5579 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3236) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3236) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3237) : item=0 name=/dev/.udev/db/tty:tty14 inode=5581 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3237) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3237) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3238) : item=0 name=/dev/.udev/db/tty:tty15 inode=5583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3238) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3238) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3239) : item=0 name=/dev/.udev/db/tty:tty16 inode=5585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3239) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3239) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3240) : item=0 name=/dev/.udev/db/tty:tty17 inode=5587 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3240) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3240) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3241) : item=0 name=/dev/.udev/db/tty:tty18 inode=5589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3241) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3241) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3242) : item=0 name=/dev/.udev/db/tty:tty19 inode=5591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3242) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3242) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3243) : item=0 name=/dev/.udev/db/tty:tty2 inode=5593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3243) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3243) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3244) : item=0 name=/dev/.udev/db/tty:tty20 inode=5595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3244) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3244) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3245) : item=0 name=/dev/.udev/db/tty:tty21 inode=5597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3245) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3245) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3246) : item=0 name=/dev/.udev/db/tty:tty22 inode=5599 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3246) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3246) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3247) : item=0 name=/dev/.udev/db/tty:tty23 inode=5601 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3247) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3247) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.762:3248) : item=0 name=/dev/.udev/db/tty:tty24 inode=5603 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.762:3248) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.762:3248) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3249) : item=0 name=/dev/.udev/db/tty:tty25 inode=5605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3249) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3249) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3250) : item=0 name=/dev/.udev/db/tty:tty26 inode=5607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3250) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3250) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3251) : item=0 name=/dev/.udev/db/tty:tty27 inode=5609 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3251) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3251) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3252) : item=0 name=/dev/.udev/db/tty:tty28 inode=5611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3252) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3252) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3253) : item=0 name=/dev/.udev/db/tty:tty29 inode=5615 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3253) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3253) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3254) : item=0 name=/dev/.udev/db/tty:tty3 inode=5613 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3254) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3254) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3255) : item=0 name=/dev/.udev/db/tty:tty30 inode=5627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3255) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3255) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3256) : item=0 name=/dev/.udev/db/tty:tty31 inode=5617 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3256) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3256) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3257) : item=0 name=/dev/.udev/db/tty:tty32 inode=5619 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3257) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3257) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3258) : item=0 name=/dev/.udev/db/tty:tty33 inode=5621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3258) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3258) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3259) : item=0 name=/dev/.udev/db/tty:tty34 inode=5623 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3259) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3259) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3260) : item=0 name=/dev/.udev/db/tty:tty35 inode=5625 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3260) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3260) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3261) : item=0 name=/dev/.udev/db/tty:tty36 inode=5637 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3261) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3261) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3262) : item=0 name=/dev/.udev/db/tty:tty37 inode=5629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3262) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3262) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3263) : item=0 name=/dev/.udev/db/tty:tty38 inode=5631 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3263) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3263) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3264) : item=0 name=/dev/.udev/db/tty:tty39 inode=5633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3264) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3264) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3265) : item=0 name=/dev/.udev/db/tty:tty4 inode=5635 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3265) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3265) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3266) : item=0 name=/dev/.udev/db/tty:tty40 inode=5653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3266) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3266) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3267) : item=0 name=/dev/.udev/db/tty:tty41 inode=5645 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3267) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3267) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3268) : item=0 name=/dev/.udev/db/tty:tty42 inode=5647 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3268) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3268) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3269) : item=0 name=/dev/.udev/db/tty:tty43 inode=5649 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3269) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3269) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3270) : item=0 name=/dev/.udev/db/tty:tty44 inode=5651 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3270) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3270) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3271) : item=0 name=/dev/.udev/db/tty:tty45 inode=5667 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3271) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3271) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3272) : item=0 name=/dev/.udev/db/tty:tty46 inode=5656 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3272) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3272) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3273) : item=0 name=/dev/.udev/db/tty:tty47 inode=5662 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3273) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3273) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3274) : item=0 name=/dev/.udev/db/tty:tty48 inode=5664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3274) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3274) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3275) : item=0 name=/dev/.udev/db/tty:tty49 inode=5679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3275) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3275) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3276) : item=0 name=/dev/.udev/db/tty:tty5 inode=5681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3276) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3276) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3277) : item=0 name=/dev/.udev/db/tty:tty50 inode=5683 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3277) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3277) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3278) : item=0 name=/dev/.udev/db/tty:tty51 inode=5690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3278) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3278) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.766:3279) : item=0 name=/dev/.udev/db/tty:tty52 inode=5692 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.766:3279) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.766:3279) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3280) : item=0 name=/dev/.udev/db/tty:tty53 inode=5699 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3280) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3280) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3281) : item=0 name=/dev/.udev/db/tty:tty54 inode=5701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3281) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3281) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3282) : item=0 name=/dev/.udev/db/tty:tty55 inode=5703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3282) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3282) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3283) : item=0 name=/dev/.udev/db/tty:tty56 inode=5705 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3283) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3283) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3284) : item=0 name=/dev/.udev/db/tty:tty57 inode=5707 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3284) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3284) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3285) : item=0 name=/dev/.udev/db/tty:tty58 inode=5709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3285) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3285) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3286) : item=0 name=/dev/.udev/db/tty:tty59 inode=5711 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3286) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3286) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3287) : item=0 name=/dev/.udev/db/tty:tty6 inode=5713 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3287) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3287) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3288) : item=0 name=/dev/.udev/db/tty:tty60 inode=5715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3288) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3288) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3289) : item=0 name=/dev/.udev/db/tty:tty61 inode=5717 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3289) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3289) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3290) : item=0 name=/dev/.udev/db/tty:tty62 inode=5719 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3290) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3290) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3291) : item=0 name=/dev/.udev/db/tty:tty63 inode=5721 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3291) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3291) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3292) : item=0 name=/dev/.udev/db/tty:tty7 inode=5723 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3292) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3292) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3293) : item=0 name=/dev/.udev/db/tty:tty8 inode=5725 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3293) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3293) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3294) : item=0 name=/dev/.udev/db/tty:tty9 inode=5727 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3294) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3294) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3295) : item=0 name=/dev/.udev/db/vc:vcs inode=5729 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3295) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3295) : arch=i386 syscall=readlink success=yes exit=12 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3296) : item=0 name=/dev/.udev/db/vc:vcs1 inode=5731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3296) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3296) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3297) : item=0 name=/dev/.udev/db/vc:vcs10 inode=7285 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3297) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3297) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3298) : item=0 name=/dev/.udev/db/vc:vcs2 inode=10710 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3298) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3298) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3299) : item=0 name=/dev/.udev/db/vc:vcs3 inode=5733 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3299) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3299) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3300) : item=0 name=/dev/.udev/db/vc:vcs4 inode=5735 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3300) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3300) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3301) : item=0 name=/dev/.udev/db/vc:vcs5 inode=10720 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3301) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3301) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3302) : item=0 name=/dev/.udev/db/vc:vcs6 inode=10730 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3302) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3302) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3303) : item=0 name=/dev/.udev/db/vc:vcs7 inode=7612 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3303) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3303) : arch=i386 syscall=readlink success=yes exit=13 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3304) : item=0 name=/dev/.udev/db/vc:vcsa inode=5737 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3304) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3304) : arch=i386 syscall=readlink success=yes exit=15 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.770:3305) : item=0 name=/dev/.udev/db/vc:vcsa1 inode=5739 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.770:3305) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.770:3305) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.774:3306) : item=0 name=/dev/.udev/db/vc:vcsa10 inode=7293 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.774:3306) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.774:3306) : arch=i386 syscall=readlink success=yes exit=17 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.774:3307) : item=0 name=/dev/.udev/db/vc:vcsa2 inode=10714 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.774:3307) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.774:3307) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.774:3308) : item=0 name=/dev/.udev/db/vc:vcsa3 inode=5741 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.774:3308) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.774:3308) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.774:3309) : item=0 name=/dev/.udev/db/vc:vcsa4 inode=5743 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.774:3309) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.774:3309) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.774:3310) : item=0 name=/dev/.udev/db/vc:vcsa5 inode=10722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.774:3310) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.774:3310) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.774:3311) : item=0 name=/dev/.udev/db/vc:vcsa6 inode=10731 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.774:3311) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.774:3311) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.774:3312) : item=0 name=/dev/.udev/db/vc:vcsa7 inode=7616 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:56:40.774:3312) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.774:3312) : arch=i386 syscall=readlink success=yes exit=16 a0=bf9f461c a1=bf9f421c a2=400 a3=ffffffff items=1 ppid=4474 pid=4475 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.850:3313) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.850:3313) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.850:3313) : arch=i386 syscall=open success=yes exit=17 a0=970f11c a1=8000 a2=0 a3=0 items=1 ppid=4120 pid=4147 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=y2base exe=/usr/lib/YaST2/bin/y2base key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.877:3314) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:40.877:3314) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.877:3314) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4476 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.885:3315) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:40.885:3315) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.885:3315) : arch=i386 syscall=open success=yes exit=3 a0=80ecec0 a1=8241 a2=1b6 a3=0 items=1 ppid=4476 pid=4477 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.893:3316) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:56:40.893:3316) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.893:3316) : arch=i386 syscall=open success=yes exit=3 a0=bff9c513 a1=8000 a2=0 a3=200 items=1 ppid=4476 pid=4477 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dd exe=/bin/dd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.937:3317) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:40.937:3317) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.937:3317) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4480 pid=4481 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:40.945:3318) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:56:40.945:3318) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:40.945:3318) : arch=i386 syscall=open success=yes exit=3 a0=80ecae0 a1=8241 a2=1b6 a3=0 items=1 ppid=4481 pid=4482 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:41.377:3320) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:41.377:3320) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:41.377:3320) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4491 pid=4492 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:43.622:3321) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:43.622:3321) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:43.622:3321) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4494 pid=4495 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:43.886:3322) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:43.886:3322) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:43.886:3322) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4497 pid=4498 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:56:41.273:3319) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:56:41.273:3319) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:56:41.273:3319) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4488 pid=4489 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:37.965:3323) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:37.965:3323) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:37.965:3323) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4499 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.050:3324) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.050:3324) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.050:3324) : arch=i386 syscall=open success=yes exit=3 a0=bfed3a5c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4499 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.082:3325) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:38.082:3325) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.082:3325) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4500 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.173:3326) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:38.173:3326) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.173:3326) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805a3f1 a1=8900 a2=0 a3=1 items=1 ppid=4500 pid=4501 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ps exe=/bin/ps key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.281:3327) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:38.281:3327) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.281:3327) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4504 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.413:3328) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.413:3328) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.413:3328) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4504 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.413:3329) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.413:3329) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.413:3329) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4504 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.449:3330) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.449:3330) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.449:3330) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4505 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.505:3331) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.505:3331) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.505:3331) : arch=i386 syscall=open success=yes exit=3 a0=bf9f9f1c a1=8800 a2=0 a3=bf9f9f1c items=1 ppid=1510 pid=4505 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.509:3332) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.509:3332) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.509:3332) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4509 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.533:3333) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.533:3333) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.533:3333) : arch=i386 syscall=open success=yes exit=3 a0=bfea488c a1=8800 a2=0 a3=bfea4c44 items=1 ppid=1510 pid=4509 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.533:3334) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.533:3334) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.533:3334) : arch=i386 syscall=open success=yes exit=3 a0=bfea488c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4509 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.537:3335) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.537:3335) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.537:3335) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4510 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.557:3336) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.557:3336) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.557:3336) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4511 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.577:3337) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:38.577:3337) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.577:3337) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.585:3338) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.585:3338) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.585:3338) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.605:3339) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.605:3339) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.605:3339) : arch=i386 syscall=open success=yes exit=3 a0=bfab1c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4511 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.618:3340) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.618:3340) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.618:3340) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4513 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.629:3341) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.629:3341) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.629:3341) : arch=i386 syscall=open success=yes exit=4 a0=bf9e6c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4513 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.637:3342) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.637:3342) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.637:3342) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4514 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.637:3343) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.637:3343) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.637:3343) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.689:3344) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.689:3344) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.689:3344) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.737:3345) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.737:3345) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.737:3345) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.757:3346) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.757:3346) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.757:3346) : arch=i386 syscall=open success=yes exit=3 a0=bfaa8fec a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4514 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.757:3347) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.757:3347) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.757:3347) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4514 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.765:3348) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.765:3348) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.765:3348) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4515 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.789:3349) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.789:3349) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.789:3349) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.793:3350) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.793:3350) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.793:3350) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4515 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.797:3351) : item=0 name=/dev/.udev/db/block:sda inode=21207 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.797:3351) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.797:3351) : arch=i386 syscall=open success=yes exit=4 a0=bff6a30c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4515 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.813:3352) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.813:3352) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.813:3352) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4516 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.817:3353) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.817:3353) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.817:3353) : arch=i386 syscall=open success=yes exit=3 a0=bfa01f1c a1=8800 a2=0 a3=bfa01f1c items=1 ppid=1510 pid=4516 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.825:3354) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.825:3354) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.825:3354) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4517 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.829:3355) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.829:3355) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.829:3355) : arch=i386 syscall=open success=yes exit=3 a0=bf8aff4c a1=8800 a2=0 a3=bf8b0304 items=1 ppid=1510 pid=4517 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.829:3356) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.829:3356) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.829:3356) : arch=i386 syscall=open success=yes exit=3 a0=bf8aff4c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4517 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.837:3357) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.837:3357) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.837:3357) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4518 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.841:3358) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.841:3358) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.841:3358) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.853:3359) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.853:3359) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.853:3359) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4519 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.861:3360) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.861:3360) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.861:3360) : arch=i386 syscall=open success=yes exit=3 a0=bffb7c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4519 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.889:3361) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.889:3361) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.889:3361) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.905:3362) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.905:3362) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.905:3362) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4520 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.917:3363) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.917:3363) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.917:3363) : arch=i386 syscall=open success=yes exit=4 a0=bfca3c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4520 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.921:3364) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.921:3364) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.921:3364) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4521 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.941:3365) : item=0 name=/dev/.udev/db/block:sda inode=22325 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.941:3365) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.941:3365) : arch=i386 syscall=open success=yes exit=3 a0=bf88c79c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4521 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.941:3366) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.941:3366) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.941:3366) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4521 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.941:3367) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.941:3367) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.941:3367) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.953:3368) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:38.953:3368) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.953:3368) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4522 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.965:3369) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:38.965:3369) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.965:3369) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4522 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.965:3370) : item=0 name=/dev/.udev/db/block:sda inode=22325 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.965:3370) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:38.965:3370) : arch=i386 syscall=open success=yes exit=4 a0=bf9470ec a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4522 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:38.994:3371) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:38.994:3371) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:38.994:3371) : arch=i386 syscall=open success=yes exit=3 a0=bfab211c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4512 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.033:3372) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.033:3372) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.033:3372) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4523 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.045:3373) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.045:3373) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.045:3373) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4523 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.049:3374) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.049:3374) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.049:3374) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4523 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.057:3375) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.057:3375) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.057:3375) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4524 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.089:3376) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.089:3376) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.089:3376) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4525 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.113:3377) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.113:3377) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.113:3377) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805a3f1 a1=8900 a2=0 a3=1 items=1 ppid=4525 pid=4526 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ps exe=/bin/ps key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.190:3378) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.190:3378) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.190:3378) : arch=i386 syscall=open success=yes exit=3 a0=bf9cef1c a1=8800 a2=0 a3=bf9cef1c items=1 ppid=1510 pid=4524 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.214:3379) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.214:3379) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.214:3379) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4530 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.218:3380) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.218:3380) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.218:3380) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4529 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.230:3381) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.230:3381) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.230:3381) : arch=i386 syscall=open success=yes exit=3 a0=bfc29a3c a1=8800 a2=0 a3=bfc29df4 items=1 ppid=1510 pid=4530 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.234:3382) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.234:3382) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.234:3382) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4529 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.234:3383) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.234:3383) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.234:3383) : arch=i386 syscall=open success=yes exit=3 a0=bfc29a3c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4530 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.238:3384) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.238:3384) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.238:3384) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4529 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.238:3385) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.238:3385) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.238:3385) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4531 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.258:3386) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.258:3386) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.258:3386) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4532 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.266:3387) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.266:3387) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.266:3387) : arch=i386 syscall=open success=yes exit=3 a0=bffe0c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4532 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.286:3388) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.286:3388) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.286:3388) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4533 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.294:3389) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.294:3389) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.294:3389) : arch=i386 syscall=open success=yes exit=4 a0=bfebfc4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4533 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.322:3390) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.322:3390) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.322:3390) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4534 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.346:3391) : item=0 name=/dev/.udev/db/block:sda inode=22344 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.346:3391) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.346:3391) : arch=i386 syscall=open success=yes exit=3 a0=bff7888c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4534 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.358:3392) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.358:3392) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.358:3392) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4534 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.378:3393) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.378:3393) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.378:3393) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4536 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.390:3394) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.390:3394) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.390:3394) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4536 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.394:3395) : item=0 name=/dev/.udev/db/block:sda inode=22344 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.394:3395) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.394:3395) : arch=i386 syscall=open success=yes exit=4 a0=bfc81dac a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4536 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.402:3396) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.402:3396) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.402:3396) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4535 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.426:3397) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.426:3397) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.426:3397) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4539 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.438:3398) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.438:3398) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.438:3398) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4535 pid=4537 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.438:3399) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.438:3399) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.438:3399) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4535 pid=4537 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.442:3400) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.442:3400) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.442:3400) : arch=i386 syscall=open success=yes exit=3 a0=bfd96f1c a1=8800 a2=0 a3=bfd96f1c items=1 ppid=1510 pid=4539 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.450:3401) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.450:3401) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.450:3401) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4540 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.462:3402) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.462:3402) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.462:3402) : arch=i386 syscall=open success=yes exit=3 a0=bfd76f8c a1=8800 a2=0 a3=bfd77344 items=1 ppid=1510 pid=4540 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.462:3403) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.462:3403) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.462:3403) : arch=i386 syscall=open success=yes exit=3 a0=bfd76f8c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4540 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.466:3404) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.466:3404) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.466:3404) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4541 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.498:3405) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.498:3405) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.498:3405) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4543 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.510:3406) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.510:3406) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.510:3406) : arch=i386 syscall=open success=yes exit=3 a0=bfe09c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4543 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.530:3407) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.530:3407) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.530:3407) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4542 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.542:3408) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.542:3408) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.542:3408) : arch=i386 syscall=open success=yes exit=3 a0=bfed050d a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4542 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=delpart exe=/usr/sbin/delpart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.546:3409) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.546:3409) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.546:3409) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4544 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.558:3410) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.558:3410) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.558:3410) : arch=i386 syscall=open success=yes exit=4 a0=bfbb8c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4544 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.566:3411) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.566:3411) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.566:3411) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4545 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.598:3412) : item=0 name=/dev/.udev/db/block:sda inode=22552 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.598:3412) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.598:3412) : arch=i386 syscall=open success=yes exit=3 a0=bf873a6c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4545 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.602:3413) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.602:3413) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.602:3413) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4545 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.618:3414) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.618:3414) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.618:3414) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4546 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.626:3415) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.626:3415) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.626:3415) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4547 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.634:3416) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.634:3416) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.634:3416) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4547 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.638:3417) : item=0 name=/dev/.udev/db/block:sda inode=22552 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.638:3417) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.638:3417) : arch=i386 syscall=open success=yes exit=4 a0=bf9669bc a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4547 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.650:3418) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.650:3418) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.650:3418) : arch=i386 syscall=open success=yes exit=3 a0=bfcaa501 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4546 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=addpart exe=/usr/sbin/addpart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.666:3419) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.666:3419) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.666:3419) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4548 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.674:3420) : item=0 name=/dev/.tmp-block-259:524288 inode=22580 dev=00:0e mode=block,600 ouid=root ogid=root rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:39.674:3420) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.674:3420) : arch=i386 syscall=open success=yes exit=3 a0=bff94c1d a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4548 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.702:3421) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.702:3421) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.702:3421) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4549 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.706:3422) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.706:3422) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.706:3422) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4550 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.730:3423) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.730:3423) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.730:3423) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4549 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.730:3424) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.730:3424) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.730:3424) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4549 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.742:3425) : item=0 name=/dev/.udev/db/block:sda inode=22577 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.742:3425) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.742:3425) : arch=i386 syscall=open success=yes exit=3 a0=bffdd0ac a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4550 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.746:3426) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.746:3426) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.746:3426) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4550 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.797:3427) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.797:3427) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.797:3427) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4551 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.849:3428) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:39.849:3428) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.849:3428) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.853:3429) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:39.853:3429) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.853:3429) : arch=i386 syscall=open success=yes exit=3 a0=bf852c2e a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4551 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.869:3430) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.869:3430) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.869:3430) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.873:3431) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.873:3431) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.873:3431) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4553 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.893:3432) : item=0 name=/dev/.udev/db/block:sda inode=22577 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.893:3432) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.893:3432) : arch=i386 syscall=open success=yes exit=3 a0=bfc19c1c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4553 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.897:3433) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.897:3433) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.897:3433) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4553 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.921:3434) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.921:3434) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.921:3434) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.929:3435) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.929:3435) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.929:3435) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4555 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.937:3436) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.937:3436) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.937:3436) : arch=i386 syscall=open success=yes exit=3 a0=bfda9f1c a1=8800 a2=0 a3=bfda9f1c items=1 ppid=1510 pid=4555 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.941:3437) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.941:3437) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.941:3437) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4556 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.949:3438) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.949:3438) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.949:3438) : arch=i386 syscall=open success=yes exit=3 a0=bfc6d4fc a1=8800 a2=0 a3=bfc6d8b4 items=1 ppid=1510 pid=4556 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.949:3439) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.949:3439) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.949:3439) : arch=i386 syscall=open success=yes exit=3 a0=bfc6d4fc a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4556 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.957:3440) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.957:3440) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.957:3440) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4557 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.969:3441) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:39.969:3441) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:39.969:3441) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.973:3442) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:39.973:3442) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.973:3442) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4558 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:39.981:3443) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:39.981:3443) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:39.981:3443) : arch=i386 syscall=open success=yes exit=3 a0=bf9fcc6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4558 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.021:3445) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.021:3445) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.021:3445) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.005:3444) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.005:3444) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.005:3444) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4559 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.025:3446) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:40.025:3446) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:40.025:3446) : arch=i386 syscall=open success=yes exit=4 a0=bfb3de46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4554 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.029:3447) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.029:3447) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.029:3447) : arch=i386 syscall=open success=yes exit=4 a0=bfefdc4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4559 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.033:3448) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.033:3448) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:40.033:3448) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4554 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.049:3449) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.049:3449) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.049:3449) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4560 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.069:3450) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.069:3450) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.069:3450) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.077:3451) : item=0 name=/dev/.udev/db/block:sda inode=22577 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.077:3451) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.077:3451) : arch=i386 syscall=open success=yes exit=3 a0=bf9f445c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4560 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.077:3452) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.077:3452) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.077:3452) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4560 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.089:3453) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.089:3453) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.089:3453) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4562 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.097:3454) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.097:3454) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.097:3454) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4562 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.101:3455) : item=0 name=/dev/.udev/db/block:sda inode=22577 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.101:3455) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.101:3455) : arch=i386 syscall=open success=yes exit=4 a0=bffab25c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4562 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.117:3456) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:40.117:3456) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:40.117:3456) : arch=i386 syscall=open success=yes exit=4 a0=bfffde46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4561 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.121:3457) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.121:3457) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.121:3457) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.133:3458) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.133:3458) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.133:3458) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4563 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.137:3459) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.137:3459) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:40.137:3459) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4561 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.145:3460) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.145:3460) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.145:3460) : arch=i386 syscall=open success=yes exit=3 a0=bf850f1c a1=8800 a2=0 a3=bf850f1c items=1 ppid=1510 pid=4563 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.153:3461) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.153:3461) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.153:3461) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4564 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.161:3462) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.161:3462) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.161:3462) : arch=i386 syscall=open success=yes exit=3 a0=bfe4b99c a1=8800 a2=0 a3=bfe4bd54 items=1 ppid=1510 pid=4564 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.161:3463) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.161:3463) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.161:3463) : arch=i386 syscall=open success=yes exit=3 a0=bfe4b99c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4564 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.169:3464) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.169:3464) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.169:3464) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4565 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.173:3465) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.173:3465) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.173:3465) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.185:3466) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.185:3466) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.185:3466) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4566 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.193:3467) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.193:3467) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.193:3467) : arch=i386 syscall=open success=yes exit=3 a0=bf814c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4566 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.218:3468) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.218:3468) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.218:3468) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4567 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.222:3469) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.222:3469) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.222:3469) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.226:3470) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.226:3470) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.226:3470) : arch=i386 syscall=open success=yes exit=4 a0=bfd62c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4567 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.230:3471) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.230:3471) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.230:3471) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4568 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.254:3472) : item=0 name=/dev/.udev/db/block:sda inode=22667 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.254:3472) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.254:3472) : arch=i386 syscall=open success=yes exit=3 a0=bfc6654c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4568 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.254:3473) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.254:3473) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.254:3473) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4568 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.262:3474) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.262:3474) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.262:3474) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4569 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.270:3475) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.270:3475) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.270:3475) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4569 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.274:3476) : item=0 name=/dev/.udev/db/block:sda inode=22667 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.274:3476) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.274:3476) : arch=i386 syscall=open success=yes exit=4 a0=bfc4696c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4569 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.274:3477) : item=0 name=/dev/.udev/queue.bin inode=6061 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.274:3477) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.274:3477) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.327:3478) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.327:3478) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.327:3478) : arch=i386 syscall=open success=yes exit=3 a0=bfb7177c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4552 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.382:3479) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:40.382:3479) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.382:3479) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4570 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.406:3480) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:40.406:3480) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.406:3480) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805a3f1 a1=8900 a2=0 a3=1 items=1 ppid=4570 pid=4571 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ps exe=/bin/ps key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.461:3481) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:40.461:3481) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.461:3481) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4574 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.473:3482) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.473:3482) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.473:3482) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4574 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.481:3483) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.481:3483) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.481:3483) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4574 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.485:3484) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.485:3484) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.485:3484) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4575 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.497:3485) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.497:3485) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.497:3485) : arch=i386 syscall=open success=yes exit=3 a0=bfbb4f1c a1=8800 a2=0 a3=bfbb4f1c items=1 ppid=1510 pid=4575 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.517:3486) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.517:3486) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.517:3486) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4576 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.529:3487) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.529:3487) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.529:3487) : arch=i386 syscall=open success=yes exit=3 a0=bff551ac a1=8800 a2=0 a3=bff55564 items=1 ppid=1510 pid=4576 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.533:3488) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.533:3488) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.533:3488) : arch=i386 syscall=open success=yes exit=3 a0=bff551ac a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4576 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.537:3489) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.537:3489) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.537:3489) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4577 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.573:3490) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:40.573:3490) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.573:3490) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4578 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.581:3491) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.581:3491) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.581:3491) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4579 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.601:3492) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.601:3492) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.601:3492) : arch=i386 syscall=open success=yes exit=3 a0=bfecac6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4579 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.625:3493) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.625:3493) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.625:3493) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4578 pid=4580 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.625:3494) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.625:3494) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.625:3494) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4578 pid=4580 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.641:3495) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.641:3495) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.641:3495) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4582 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.649:3496) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.649:3496) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.649:3496) : arch=i386 syscall=open success=yes exit=4 a0=bfe0bc4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4582 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.685:3497) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.685:3497) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.685:3497) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4583 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.717:3498) : item=0 name=/dev/.udev/db/block:sda inode=22688 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.717:3498) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.717:3498) : arch=i386 syscall=open success=yes exit=3 a0=bf8b981c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4583 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.717:3499) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.717:3499) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.717:3499) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4583 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.725:3500) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.725:3500) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.725:3500) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4584 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.741:3501) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.741:3501) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.741:3501) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4584 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.769:3502) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:40.769:3502) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.769:3502) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4585 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.773:3503) : item=0 name=/dev/.udev/db/block:sda inode=22688 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.773:3503) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.773:3503) : arch=i386 syscall=open success=yes exit=4 a0=bfd72f4c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4584 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.777:3504) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.777:3504) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.777:3504) : arch=i386 syscall=open success=yes exit=3 a0=bfce350d a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4585 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=delpart exe=/usr/sbin/delpart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.805:3505) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.805:3505) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.805:3505) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4586 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.825:3506) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.825:3506) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.825:3506) : arch=i386 syscall=open success=yes exit=3 a0=bfaa0f1c a1=8800 a2=0 a3=bfaa0f1c items=1 ppid=1510 pid=4586 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.845:3507) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.845:3507) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.845:3507) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4588 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.853:3508) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:40.853:3508) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.853:3508) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4587 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.857:3509) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.857:3509) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.857:3509) : arch=i386 syscall=open success=yes exit=3 a0=bf99166c a1=8800 a2=0 a3=bf991a24 items=1 ppid=1510 pid=4588 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.857:3510) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.857:3510) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.857:3510) : arch=i386 syscall=open success=yes exit=3 a0=bf99166c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4588 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.861:3511) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.861:3511) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.861:3511) : arch=i386 syscall=open success=yes exit=3 a0=bfc644fd a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4587 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=addpart exe=/usr/sbin/addpart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.865:3512) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.865:3512) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.865:3512) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4589 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.893:3513) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.893:3513) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.893:3513) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4591 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.905:3514) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.905:3514) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.905:3514) : arch=i386 syscall=open success=yes exit=3 a0=bfb01c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4591 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.909:3515) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:40.909:3515) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.909:3515) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4590 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.929:3516) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.929:3516) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.929:3516) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4590 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.929:3517) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.929:3517) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:40.929:3517) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4590 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.941:3518) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.941:3518) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.941:3518) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4592 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.953:3519) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.953:3519) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.953:3519) : arch=i386 syscall=open success=yes exit=4 a0=bfb79c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4592 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.961:3520) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.961:3520) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.961:3520) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4593 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.985:3521) : item=0 name=/dev/.udev/db/block:sda inode=22979 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:40.985:3521) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.985:3521) : arch=i386 syscall=open success=yes exit=3 a0=bf9e3a7c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4593 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.985:3522) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:40.985:3522) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.985:3522) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4593 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:40.997:3523) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:40.997:3523) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:40.997:3523) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4594 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.009:3525) : item=0 name=/dev/.udev/db/block:sda inode=22979 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.009:3525) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.009:3525) : arch=i386 syscall=open success=yes exit=4 a0=bfff1bec a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4594 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.042:3526) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.042:3526) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.042:3526) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4595 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.054:3527) : item=0 name=/dev/.tmp-block-259:262144 inode=23006 dev=00:0e mode=block,600 ouid=root ogid=root rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.054:3527) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.054:3527) : arch=i386 syscall=open success=yes exit=3 a0=bfe22c1d a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4595 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.058:3528) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.058:3528) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.058:3528) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4596 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.070:3529) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:41.070:3529) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.070:3529) : arch=i386 syscall=open success=yes exit=3 a0=bfaf7c2e a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4596 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.101:3530) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:41.101:3530) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.101:3530) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4597 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.113:3531) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.113:3531) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.113:3531) : arch=i386 syscall=open success=yes exit=3 a0=bfd4808c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4597 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.117:3532) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.117:3532) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.117:3532) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4598 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.133:3533) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.133:3533) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.133:3533) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4599 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.141:3534) : item=0 name=/dev/.udev/db/block:sda inode=23005 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.141:3534) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.141:3534) : arch=i386 syscall=open success=yes exit=3 a0=bff8dd5c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4598 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.141:3535) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.141:3535) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.141:3535) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4598 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.161:3536) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.161:3536) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.161:3536) : arch=i386 syscall=open success=yes exit=3 a0=bfd4808c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4597 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.169:3537) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.169:3537) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.169:3537) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4601 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.177:3538) : item=0 name=/dev/.udev/db/block:sda inode=23005 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.177:3538) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.177:3538) : arch=i386 syscall=open success=yes exit=3 a0=bfd2849c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4599 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.181:3539) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.181:3539) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.181:3539) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4599 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.181:3540) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.181:3540) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:41.181:3540) : arch=i386 syscall=open success=yes exit=4 a0=bfe03e46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4600 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.189:3541) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.189:3541) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.189:3541) : arch=i386 syscall=open success=yes exit=3 a0=bfc8ac2e a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4601 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.209:3542) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.209:3542) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:41.209:3542) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4600 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.213:3543) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.213:3543) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.213:3543) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4603 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.213:3544) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.213:3544) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.213:3544) : arch=i386 syscall=open success=yes exit=3 a0=bfd4808c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4597 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.233:3545) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:41.233:3545) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:41.233:3545) : arch=i386 syscall=open success=yes exit=4 a0=bfb85e46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4602 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.233:3546) : item=0 name=/dev/.udev/db/block:sda inode=23005 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.233:3546) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.233:3546) : arch=i386 syscall=open success=yes exit=3 a0=bf86b16c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4603 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.237:3547) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.237:3547) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.237:3547) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4603 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.237:3548) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.237:3548) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:41.237:3548) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4602 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.257:3549) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.257:3549) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.257:3549) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4605 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.261:3550) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.261:3550) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:41.261:3550) : arch=i386 syscall=open success=yes exit=4 a0=bf90ce46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4604 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.265:3551) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.265:3551) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.265:3551) : arch=i386 syscall=open success=yes exit=3 a0=bfd4808c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4597 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.265:3552) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.265:3552) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.265:3552) : arch=i386 syscall=open success=yes exit=3 a0=bfa2bf1c a1=8800 a2=0 a3=bfa2bf1c items=1 ppid=1510 pid=4605 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.273:3553) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.273:3553) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:41.273:3553) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4604 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.277:3554) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.277:3554) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.277:3554) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4606 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.281:3555) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.281:3555) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.281:3555) : arch=i386 syscall=open success=yes exit=3 a0=bfe3ad4c a1=8800 a2=0 a3=bfe3b104 items=1 ppid=1510 pid=4606 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.285:3556) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.285:3556) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.285:3556) : arch=i386 syscall=open success=yes exit=3 a0=bfe3ad4c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4606 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.289:3557) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.289:3557) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.289:3557) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4607 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.305:3558) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.305:3558) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.305:3558) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4608 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.313:3559) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.313:3559) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.313:3559) : arch=i386 syscall=open success=yes exit=3 a0=bf97fc6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4608 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.317:3560) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.317:3560) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.317:3560) : arch=i386 syscall=open success=yes exit=3 a0=bfd4808c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4597 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.329:3561) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.329:3561) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.329:3561) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4609 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.337:3562) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.337:3562) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.337:3562) : arch=i386 syscall=open success=yes exit=4 a0=bfb60c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4609 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.345:3563) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.345:3563) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.345:3563) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4610 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.365:3564) : item=0 name=/dev/.udev/db/block:sda inode=23005 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.365:3564) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.365:3564) : arch=i386 syscall=open success=yes exit=3 a0=bfed5b1c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4610 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.365:3565) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.365:3565) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.365:3565) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4610 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.369:3566) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.369:3566) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.369:3566) : arch=i386 syscall=open success=yes exit=3 a0=bfd4808c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4597 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.373:3567) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.373:3567) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.373:3567) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4611 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.385:3568) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.385:3568) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.385:3568) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4611 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.385:3569) : item=0 name=/dev/.udev/db/block:sda inode=23005 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.385:3569) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.385:3569) : arch=i386 syscall=open success=yes exit=4 a0=bf819a5c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4611 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.417:3570) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.417:3570) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.417:3570) : arch=i386 syscall=open success=yes exit=3 a0=bfd4808c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4597 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.469:3571) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:41.469:3571) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.469:3571) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4612 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.477:3572) : item=0 name=/dev/.udev/queue.bin inode=22689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.477:3572) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.477:3572) : arch=i386 syscall=open success=yes exit=3 a0=bfa21a6c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4612 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.005:3524) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.005:3524) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.005:3524) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4594 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.510:3573) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:41.510:3573) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.510:3573) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4613 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.569:3574) : item=0 name=/dev/zero inode=2889 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:41.569:3574) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.569:3574) : arch=i386 syscall=open success=yes exit=3 a0=bfc504f8 a1=8000 a2=0 a3=400 items=1 ppid=4147 pid=4613 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dd exe=/bin/dd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.569:3575) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.569:3575) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.569:3575) : arch=i386 syscall=open success=yes exit=3 a0=bfc50505 a1=8201 a2=0 a3=ffffffff items=1 ppid=4147 pid=4613 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dd exe=/bin/dd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.589:3576) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.589:3576) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.589:3576) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4614 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.597:3577) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.597:3577) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.597:3577) : arch=i386 syscall=open success=yes exit=3 a0=bfcd4c2b a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4614 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.645:3578) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.645:3578) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.645:3578) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4615 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.677:3579) : item=0 name=/dev/.udev/db/block:sda inode=23123 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.677:3579) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.677:3579) : arch=i386 syscall=open success=yes exit=3 a0=bfe9bb2c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4615 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.681:3580) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.681:3580) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.681:3580) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1510 pid=4615 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.713:3581) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:41.713:3581) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.713:3581) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4616 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.726:3582) : item=0 name=/dev/zero inode=2889 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:41.726:3582) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.726:3582) : arch=i386 syscall=open success=yes exit=3 a0=bfa1f4eb a1=8000 a2=0 a3=400 items=1 ppid=4147 pid=4616 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dd exe=/bin/dd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.726:3583) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.726:3583) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.726:3583) : arch=i386 syscall=open success=yes exit=3 a0=bfa1f4f8 a1=8002 a2=0 a3=ffffffff items=1 ppid=4147 pid=4616 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dd exe=/bin/dd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.750:3584) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.750:3584) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.750:3584) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4617 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.762:3585) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.762:3585) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.762:3585) : arch=i386 syscall=open success=yes exit=3 a0=bff83c2b a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4617 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.786:3586) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.786:3586) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.786:3586) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4618 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.818:3587) : item=0 name=/dev/.udev/db/block:sda inode=23123 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:41.818:3587) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.818:3587) : arch=i386 syscall=open success=yes exit=3 a0=bfbf6aec a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4618 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.818:3588) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:41.818:3588) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:41.818:3588) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1510 pid=4618 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.842:3589) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:41.842:3589) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.842:3589) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4619 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.854:3590) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:41.854:3590) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.854:3590) : arch=i386 syscall=open success=yes exit=3 a0=804f030 a1=8000 a2=0 a3=804f008 items=1 ppid=4147 pid=4619 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.854:3591) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:41.854:3591) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.854:3591) : arch=i386 syscall=open success=yes exit=3 a0=804f080 a1=8000 a2=0 a3=804f040 items=1 ppid=4147 pid=4619 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.914:3592) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:41.914:3592) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.914:3592) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4620 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:41.945:3593) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:41.945:3593) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:41.945:3593) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805a3f1 a1=8900 a2=0 a3=1 items=1 ppid=4620 pid=4621 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ps exe=/bin/ps key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.014:3595) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.014:3595) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:42.014:3595) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4624 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.014:3596) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.014:3596) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:42.014:3596) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4624 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.034:3597) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.034:3597) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.034:3597) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4625 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.046:3598) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.046:3598) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.046:3598) : arch=i386 syscall=open success=yes exit=3 a0=bfa54f1c a1=8800 a2=0 a3=bfa54f1c items=1 ppid=1510 pid=4625 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.058:3599) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.058:3599) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.058:3599) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4626 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.074:3600) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.074:3600) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.074:3600) : arch=i386 syscall=open success=yes exit=3 a0=bff3f7cc a1=8800 a2=0 a3=bff3fb84 items=1 ppid=1510 pid=4626 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.074:3601) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.074:3601) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.074:3601) : arch=i386 syscall=open success=yes exit=3 a0=bff3f7cc a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4626 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.078:3602) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.078:3602) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.078:3602) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4627 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.110:3603) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.110:3603) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.110:3603) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4628 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.126:3604) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.126:3604) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.126:3604) : arch=i386 syscall=open success=yes exit=3 a0=bfe0bc6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4628 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.154:3605) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.154:3605) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.154:3605) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4630 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.170:3606) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:42.170:3606) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:42.170:3606) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4629 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.194:3607) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:42.194:3607) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:42.194:3607) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805a3f1 a1=8900 a2=0 a3=1 items=1 ppid=4629 pid=4631 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ps exe=/bin/ps key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.230:3608) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.230:3608) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.230:3608) : arch=i386 syscall=open success=yes exit=4 a0=bff88c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4630 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.238:3609) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.238:3609) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.238:3609) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4634 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.266:3610) : item=0 name=/dev/.udev/db/block:sda inode=23123 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:42.266:3610) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.266:3610) : arch=i386 syscall=open success=yes exit=3 a0=bfa4b37c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4634 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.266:3611) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.266:3611) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.266:3611) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4634 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.282:3612) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.282:3612) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.282:3612) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4635 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.290:3613) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.290:3613) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.290:3613) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4635 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.294:3614) : item=0 name=/dev/.udev/db/block:sda inode=23123 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:42.294:3614) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.294:3614) : arch=i386 syscall=open success=yes exit=4 a0=bfdd3c4c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4635 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.326:3615) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:42.326:3615) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:42.326:3615) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4636 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.346:3616) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.346:3616) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:42.346:3616) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4636 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.346:3617) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.346:3617) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:42.346:3617) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4636 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.614:3618) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.614:3618) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.614:3618) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4637 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.626:3619) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.626:3619) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.626:3619) : arch=i386 syscall=open success=yes exit=3 a0=bff51f1c a1=8800 a2=0 a3=bff51f1c items=1 ppid=1510 pid=4637 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.717:3620) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.717:3620) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.717:3620) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4638 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.729:3621) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.729:3621) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.729:3621) : arch=i386 syscall=open success=yes exit=3 a0=bff74b5c a1=8800 a2=0 a3=bff74f14 items=1 ppid=1510 pid=4638 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.729:3622) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.729:3622) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.729:3622) : arch=i386 syscall=open success=yes exit=3 a0=bff74b5c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4638 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.733:3623) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.733:3623) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.733:3623) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4639 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.753:3624) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.753:3624) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.753:3624) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4640 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.773:3625) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.773:3625) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.773:3625) : arch=i386 syscall=open success=yes exit=3 a0=bfb39c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4640 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.833:3626) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.833:3626) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.833:3626) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4641 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.845:3627) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:42.845:3627) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.845:3627) : arch=i386 syscall=open success=yes exit=4 a0=bfdebc4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4641 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.849:3628) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:42.849:3628) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.849:3628) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4642 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.997:3629) : item=0 name=/dev/.udev/db/block:sda inode=23446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:42.997:3629) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:42.997:3629) : arch=i386 syscall=open success=yes exit=3 a0=bfda3b3c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4642 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:42.002:3594) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:42.002:3594) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:42.002:3594) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4624 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.017:3655) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:44.017:3655) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:44.017:3655) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4658 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.017:3656) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.017:3656) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.017:3656) : arch=i386 syscall=open success=yes exit=4 a0=bfc44c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4659 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.021:3657) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.021:3657) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.021:3657) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4660 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.113:3631) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.113:3631) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.113:3631) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4643 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.033:3658) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.033:3658) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:44.033:3658) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4658 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.033:3659) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.033:3659) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:44.033:3659) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4658 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.145:3660) : item=0 name=/dev/.udev/db/block:sda inode=23470 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:44.145:3660) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.145:3660) : arch=i386 syscall=open success=yes exit=3 a0=bfde39ec a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4660 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.145:3661) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.145:3661) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.145:3661) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4660 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.165:3662) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.165:3662) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.165:3662) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4661 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.173:3663) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.173:3663) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.173:3663) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4661 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.177:3664) : item=0 name=/dev/.udev/db/block:sda inode=23470 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:44.177:3664) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.177:3664) : arch=i386 syscall=open success=yes exit=4 a0=bf88a77c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4661 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.209:3665) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.209:3665) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.209:3665) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4662 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.213:3666) : item=0 name=/dev/.tmp-block-259:262144 inode=23816 dev=00:0e mode=block,600 ouid=root ogid=root rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:44.213:3666) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.213:3666) : arch=i386 syscall=open success=yes exit=3 a0=bfdadc1d a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4662 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.237:3667) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.237:3667) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.237:3667) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4665 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.241:3668) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.241:3668) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.241:3668) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4663 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.261:3669) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:44.261:3669) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.261:3669) : arch=i386 syscall=open success=yes exit=3 a0=bfaa6c2e a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4663 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.269:3670) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:44.269:3670) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:44.269:3670) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4664 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.301:3671) : item=0 name=/dev/.udev/db/block:sda inode=23815 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:44.301:3671) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.301:3671) : arch=i386 syscall=open success=yes exit=3 a0=bfeedcac a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4665 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.305:3672) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.305:3672) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.305:3672) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4665 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.305:3673) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.305:3673) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.305:3673) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4669 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.309:3674) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:44.309:3674) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:44.309:3674) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805a3f1 a1=8900 a2=0 a3=1 items=1 ppid=4664 pid=4666 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ps exe=/bin/ps key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.369:3675) : item=0 name=/dev/.udev/db/block:sda inode=23815 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:44.369:3675) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.369:3675) : arch=i386 syscall=open success=yes exit=3 a0=bfbcceec a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4669 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.381:3676) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.381:3676) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.381:3676) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4669 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.393:3677) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:44.393:3677) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:44.393:3677) : arch=i386 syscall=open success=yes exit=4 a0=bfa51e46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4670 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.397:3678) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:44.397:3678) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:44.397:3678) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4671 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.409:3679) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.409:3679) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:44.409:3679) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4671 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.417:3680) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.417:3680) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:44.417:3680) : arch=i386 syscall=open success=yes exit=3 a0=8065118 a1=8002 a2=0 a3=80667f0 items=1 ppid=4147 pid=4671 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=parted exe=/usr/sbin/parted key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.461:3681) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.461:3681) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.461:3681) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4672 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.509:3682) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.509:3682) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.509:3682) : arch=i386 syscall=open success=yes exit=3 a0=bfc34f1c a1=8800 a2=0 a3=bfc34f1c items=1 ppid=1510 pid=4672 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.517:3683) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.517:3683) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.517:3683) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4673 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.545:3684) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.545:3684) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.545:3684) : arch=i386 syscall=open success=yes exit=3 a0=bfa5193c a1=8800 a2=0 a3=bfa51cf4 items=1 ppid=1510 pid=4673 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.545:3685) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.545:3685) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.545:3685) : arch=i386 syscall=open success=yes exit=3 a0=bfa5193c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4673 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.553:3686) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.553:3686) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.553:3686) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4674 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.569:3687) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.569:3687) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.569:3687) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4675 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.685:3688) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.685:3688) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.685:3688) : arch=i386 syscall=open success=yes exit=3 a0=bfc6dc6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4675 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.705:3689) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.705:3689) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.705:3689) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4676 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.713:3690) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.713:3690) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.713:3690) : arch=i386 syscall=open success=yes exit=4 a0=bff3bc4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4676 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.722:3691) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.722:3691) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.722:3691) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4677 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.870:3692) : item=0 name=/dev/.udev/db/block:sda inode=23815 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:44.870:3692) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.870:3692) : arch=i386 syscall=open success=yes exit=3 a0=bfd833ec a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4677 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.874:3693) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.874:3693) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.874:3693) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4677 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.878:3694) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.878:3694) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.878:3694) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4678 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.889:3695) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:44.889:3695) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.889:3695) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4678 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.893:3696) : item=0 name=/dev/.udev/db/block:sda inode=23815 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:44.893:3696) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.893:3696) : arch=i386 syscall=open success=yes exit=4 a0=bfe9ef9c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4678 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.001:3630) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:43.001:3630) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.001:3630) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4642 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.253:3632) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:43.253:3632) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.253:3632) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4643 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.257:3633) : item=0 name=/dev/.udev/db/block:sda inode=23446 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:43.257:3633) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.257:3633) : arch=i386 syscall=open success=yes exit=4 a0=bfaa2bdc a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4643 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.277:3634) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.277:3634) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.277:3634) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4644 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.285:3635) : item=0 name=/dev/sda2 inode=23017 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:43.285:3635) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.285:3635) : arch=i386 syscall=open success=yes exit=3 a0=bfdb6c2e a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4644 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.289:3636) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.289:3636) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.289:3636) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4645 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.301:3637) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.301:3637) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.301:3637) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4646 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.317:3638) : item=0 name=/dev/.udev/db/block:sda inode=23470 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:43.317:3638) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.317:3638) : arch=i386 syscall=open success=yes exit=3 a0=bfb37a7c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4646 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.317:3639) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:43.317:3639) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.317:3639) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4646 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.458:3640) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:43.458:3640) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.458:3640) : arch=i386 syscall=open success=yes exit=3 a0=bff9dc2e a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4645 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.497:3641) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.497:3641) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.497:3641) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4647 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.761:3642) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.761:3642) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.761:3642) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4650 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.785:3643) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:43.785:3643) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.785:3643) : arch=i386 syscall=open success=yes exit=3 a0=bff82f1c a1=8800 a2=0 a3=bff82f1c items=1 ppid=1510 pid=4650 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.789:3644) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:43.789:3644) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:43.789:3644) : arch=i386 syscall=open success=yes exit=4 a0=bfdf0e46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4649 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.805:3645) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.805:3645) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.805:3645) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4652 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.813:3646) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:43.813:3646) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:43.813:3646) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4649 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.897:3647) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:43.897:3647) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:43.897:3647) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4651 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.909:3648) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:43.909:3648) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.909:3648) : arch=i386 syscall=open success=yes exit=3 a0=bf9b778c a1=8800 a2=0 a3=bf9b7b44 items=1 ppid=1510 pid=4652 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.913:3649) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:43.913:3649) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.913:3649) : arch=i386 syscall=open success=yes exit=3 a0=bf9b778c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4652 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.925:3650) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.925:3650) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.925:3650) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4656 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.937:3651) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:43.937:3651) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:43.937:3651) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=805a3f1 a1=8900 a2=0 a3=1 items=1 ppid=4651 pid=4653 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=ps exe=/bin/ps key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.957:3652) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:43.957:3652) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.957:3652) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4657 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:43.965:3653) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:43.965:3653) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:43.965:3653) : arch=i386 syscall=open success=yes exit=3 a0=bffa5c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4657 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:44.005:3654) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:44.005:3654) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:44.005:3654) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4659 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.026:3697) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.026:3697) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.026:3697) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4679 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.034:3698) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.034:3698) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.034:3698) : arch=i386 syscall=open success=yes exit=3 a0=bfaa1f1c a1=8800 a2=0 a3=bfaa1f1c items=1 ppid=1510 pid=4679 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.046:3699) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.046:3699) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.046:3699) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4680 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.150:3700) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.150:3700) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.150:3700) : arch=i386 syscall=open success=yes exit=3 a0=bfc84afc a1=8800 a2=0 a3=bfc84eb4 items=1 ppid=1510 pid=4680 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.150:3701) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.150:3701) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.150:3701) : arch=i386 syscall=open success=yes exit=3 a0=bfc84afc a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4680 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.154:3702) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.154:3702) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.154:3702) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4681 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.170:3703) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.170:3703) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.170:3703) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4682 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.178:3704) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.178:3704) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.178:3704) : arch=i386 syscall=open success=yes exit=3 a0=bfb16c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4682 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.186:3705) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.186:3705) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.186:3705) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4683 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.190:3706) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.190:3706) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.190:3706) : arch=i386 syscall=open success=yes exit=4 a0=bff41c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4683 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.198:3707) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.198:3707) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.198:3707) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4684 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.254:3708) : item=0 name=/dev/.udev/db/block:sda inode=24036 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:45.254:3708) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.254:3708) : arch=i386 syscall=open success=yes exit=3 a0=bff2968c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4684 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.258:3709) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.258:3709) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.258:3709) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4684 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.282:3710) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.282:3710) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.282:3710) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4685 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.294:3711) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.294:3711) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.294:3711) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4685 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.298:3712) : item=0 name=/dev/.udev/db/block:sda inode=24036 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:45.298:3712) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.298:3712) : arch=i386 syscall=open success=yes exit=4 a0=bfbd9aac a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4685 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.349:3713) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.349:3713) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.349:3713) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4686 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.353:3714) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.353:3714) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.353:3714) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4687 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.361:3715) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:45.361:3715) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.361:3715) : arch=i386 syscall=open success=yes exit=3 a0=bfccfc2e a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4686 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.369:3716) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.369:3716) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.369:3716) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4688 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.381:3717) : item=0 name=/dev/.udev/db/block:sda inode=24059 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:45.381:3717) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.381:3717) : arch=i386 syscall=open success=yes exit=3 a0=bfb2886c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4688 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.381:3718) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.381:3718) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.381:3718) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4688 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.494:3719) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:45.494:3719) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.494:3719) : arch=i386 syscall=open success=yes exit=3 a0=bf919c2e a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4687 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.506:3720) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.506:3720) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.506:3720) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4689 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.661:3721) : item=0 name=/dev/.udev/db/block:sda inode=24059 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:45.661:3721) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.661:3721) : arch=i386 syscall=open success=yes exit=3 a0=bfd88a9c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4689 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.665:3722) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.665:3722) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.665:3722) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4689 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.681:3723) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.681:3723) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.681:3723) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4690 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.689:3724) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.689:3724) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.689:3724) : arch=i386 syscall=open success=yes exit=3 a0=bfed0f1c a1=8800 a2=0 a3=bfed0f1c items=1 ppid=1510 pid=4690 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.693:3725) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.693:3725) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.693:3725) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4691 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.746:3726) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.746:3726) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.746:3726) : arch=i386 syscall=open success=yes exit=3 a0=bff83d1c a1=8800 a2=0 a3=bff840d4 items=1 ppid=1510 pid=4691 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.746:3727) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.746:3727) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.746:3727) : arch=i386 syscall=open success=yes exit=3 a0=bff83d1c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4691 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.750:3728) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.750:3728) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.750:3728) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4692 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.762:3729) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.762:3729) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.762:3729) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4693 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.770:3730) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.770:3730) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.770:3730) : arch=i386 syscall=open success=yes exit=3 a0=bfb43c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4693 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.778:3731) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.778:3731) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.778:3731) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4694 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.786:3732) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.786:3732) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.786:3732) : arch=i386 syscall=open success=yes exit=4 a0=bfa01c4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4694 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.822:3733) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.822:3733) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.822:3733) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4697 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.850:3734) : item=0 name=/dev/.udev/db/block:sda inode=24059 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:45.850:3734) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.850:3734) : arch=i386 syscall=open success=yes exit=3 a0=bfb01b7c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4697 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.854:3735) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.854:3735) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.854:3735) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4697 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.858:3736) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:45.858:3736) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.858:3736) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4698 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.866:3737) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:45.866:3737) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.866:3737) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4698 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:45.870:3738) : item=0 name=/dev/.udev/db/block:sda inode=24059 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:45.870:3738) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:45.870:3738) : arch=i386 syscall=open success=yes exit=4 a0=bfe9cb0c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4698 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.446:3740) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:47.446:3740) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.446:3740) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4701 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.653:3741) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.653:3741) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.653:3741) : arch=i386 syscall=open success=yes exit=3 a0=bf930f1c a1=8800 a2=0 a3=bf930f1c items=1 ppid=1510 pid=4701 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.657:3742) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:47.657:3742) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.657:3742) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4703 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.665:3743) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.665:3743) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.665:3743) : arch=i386 syscall=open success=yes exit=3 a0=bfb1db1c a1=8800 a2=0 a3=bfb1ded4 items=1 ppid=1510 pid=4703 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.665:3744) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.665:3744) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.665:3744) : arch=i386 syscall=open success=yes exit=3 a0=bfb1db1c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4703 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.669:3745) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:47.669:3745) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.669:3745) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4704 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.685:3746) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:47.685:3746) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.685:3746) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4705 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.773:3747) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:47.773:3747) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:47.773:3747) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.777:3748) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:47.777:3748) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:47.777:3748) : arch=i386 syscall=open success=yes exit=4 a0=bff02e46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4700 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.793:3749) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.793:3749) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.793:3749) : arch=i386 syscall=open success=yes exit=3 a0=bfb09c6a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4705 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.793:3750) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.793:3750) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:47.793:3750) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4700 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.817:3751) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:47.817:3751) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.817:3751) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4707 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.825:3752) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:47.825:3752) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:47.825:3752) : arch=i386 syscall=open success=yes exit=4 a0=bfe7ee46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4706 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.841:3753) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.841:3753) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:47.841:3753) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4706 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.853:3754) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:47.853:3754) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:47.853:3754) : arch=i386 syscall=open success=yes exit=4 a0=bfdece46 a1=8000 a2=0 a3=1 items=1 ppid=2028 pid=4708 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.861:3755) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.861:3755) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:47.861:3755) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4708 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.889:3756) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:47.889:3756) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:47.889:3756) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.942:3757) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:47.942:3757) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:47.942:3757) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.954:3758) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.954:3758) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.954:3758) : arch=i386 syscall=open success=yes exit=4 a0=bffbcc4e a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4707 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.961:3759) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:47.961:3759) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:47.961:3759) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4709 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.993:3760) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:47.993:3760) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:47.993:3760) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:47.442:3739) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:47.442:3739) :  cwd=/usr/lib/hal 
>type=SYSCALL msg=audit(04/20/10 11:57:47.442:3739) : arch=i386 syscall=open success=yes exit=5 a0=8054d58 a1=8000 a2=0 a3=8054d58 items=1 ppid=2028 pid=4670 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=hald-probe-volu exe=/usr/lib/hal/hald-probe-volume key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.065:3761) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.065:3761) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.065:3761) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.113:3762) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.113:3762) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.113:3762) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.165:3763) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.165:3763) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.165:3763) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.218:3764) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.218:3764) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.218:3764) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.266:3765) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.266:3765) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.266:3765) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.318:3766) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.318:3766) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.318:3766) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.369:3767) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.369:3767) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.369:3767) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.409:3768) : item=0 name=/dev/.udev/db/block:sda inode=24118 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.409:3768) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:48.409:3768) : arch=i386 syscall=open success=yes exit=3 a0=bfe909bc a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4709 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.409:3769) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:48.409:3769) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:48.409:3769) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4709 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.417:3770) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:48.417:3770) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:48.417:3770) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4710 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.417:3771) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.417:3771) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.417:3771) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.470:3772) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.470:3772) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.470:3772) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.521:3773) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.521:3773) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.521:3773) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.570:3774) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.570:3774) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.570:3774) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.622:3775) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.622:3775) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.622:3775) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.673:3776) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.673:3776) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.673:3776) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.724:3777) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.724:3777) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.724:3777) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.769:3778) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:48.769:3778) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:48.769:3778) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4710 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.773:3779) : item=0 name=/dev/.udev/db/block:sda inode=24118 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.773:3779) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:48.773:3779) : arch=i386 syscall=open success=yes exit=4 a0=bfe673cc a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4710 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.773:3780) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.773:3780) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.773:3780) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:48.825:3781) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:48.825:3781) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:48.825:3781) : arch=i386 syscall=open success=yes exit=3 a0=bfcf920c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4702 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:49.273:3782) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:49.273:3782) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:49.273:3782) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4711 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:49.633:3783) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:49.633:3783) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:49.633:3783) : arch=i386 syscall=open success=yes exit=3 a0=bfd5751a a1=8082 a2=0 a3=809f008 items=1 ppid=4147 pid=4711 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:49.721:3784) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:49.721:3784) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:49.721:3784) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4147 pid=4711 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:49.734:3785) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:49.734:3785) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:49.734:3785) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4712 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:49.770:3786) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:49.770:3786) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:49.770:3786) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4713 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.125:3788) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:57:50.125:3788) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.125:3788) : arch=i386 syscall=open success=yes exit=3 a0=bffcae6c a1=8002 a2=0 a3=bffcae6c items=1 ppid=4147 pid=4713 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.141:3789) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:50.141:3789) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.141:3789) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4714 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.185:3790) : item=0 name=/dev/.udev/db/block:sda inode=24203 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.185:3790) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.185:3790) : arch=i386 syscall=open success=yes exit=3 a0=bfbcc98c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4714 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.189:3791) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:50.189:3791) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.189:3791) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4715 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.193:3792) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:50.193:3792) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.193:3792) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1510 pid=4714 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.213:3793) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.213:3793) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.213:3793) : arch=i386 syscall=open success=yes exit=3 a0=bfa6476c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4715 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.225:3794) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:50.225:3794) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.225:3794) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4716 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.233:3795) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:50.233:3795) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.233:3795) : arch=i386 syscall=open success=yes exit=3 a0=bf8a7c2e a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4716 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.249:3796) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:50.249:3796) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.249:3796) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4717 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.265:3797) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.265:3797) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.265:3797) : arch=i386 syscall=open success=yes exit=3 a0=bfa6476c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4715 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.277:3798) : item=0 name=/dev/.udev/db/block:sda inode=24203 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.277:3798) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.277:3798) : arch=i386 syscall=open success=yes exit=3 a0=bfb8622c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4717 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.277:3799) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:50.277:3799) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.277:3799) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1510 pid=4717 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.317:3800) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.317:3800) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.317:3800) : arch=i386 syscall=open success=yes exit=3 a0=bfa6476c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4715 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.345:3801) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:50.345:3801) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.345:3801) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4718 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.365:3802) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.365:3802) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.365:3802) : arch=i386 syscall=open success=yes exit=3 a0=bff704ac a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4718 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.413:3803) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:50.413:3803) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.413:3803) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4719 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.433:3804) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:50.433:3804) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.433:3804) : arch=i386 syscall=open success=yes exit=3 a0=bfae0c2e a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4719 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.469:3805) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:50.469:3805) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.469:3805) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4721 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.477:3806) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:50.477:3806) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.477:3806) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4720 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.485:3807) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.485:3807) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.485:3807) : arch=i386 syscall=open success=yes exit=3 a0=bf838fec a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4720 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.533:3808) : item=0 name=/dev/.udev/db/block:sda inode=24203 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.533:3808) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.533:3808) : arch=i386 syscall=open success=yes exit=3 a0=bff7149c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4721 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.117:3787) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:50.117:3787) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.117:3787) : arch=i386 syscall=open success=yes exit=3 a0=bfc92c2b a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4712 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.537:3809) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:50.537:3809) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.537:3809) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4721 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.537:3810) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.537:3810) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.537:3810) : arch=i386 syscall=open success=yes exit=3 a0=bf838fec a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4720 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.586:3811) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.586:3811) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.586:3811) : arch=i386 syscall=open success=yes exit=3 a0=bf838fec a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4720 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.609:3812) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:50.609:3812) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.609:3812) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4722 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.629:3813) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:50.629:3813) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.629:3813) : arch=i386 syscall=open success=yes exit=3 a0=bfb5fc2e a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4722 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.713:3814) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:50.713:3814) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.713:3814) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4723 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.761:3815) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.761:3815) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.761:3815) : arch=i386 syscall=open success=yes exit=3 a0=bf9113ac a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4723 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.851:3816) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.851:3816) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.851:3816) : arch=i386 syscall=open success=yes exit=3 a0=bf9113ac a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4723 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.881:3817) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:50.881:3817) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.881:3817) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4724 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.897:3818) : item=0 name=/dev/.udev/db/block:sda inode=24203 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.897:3818) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.897:3818) : arch=i386 syscall=open success=yes exit=3 a0=bff5057c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4724 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.901:3819) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:50.901:3819) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:50.901:3819) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1510 pid=4724 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.901:3820) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.901:3820) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.901:3820) : arch=i386 syscall=open success=yes exit=3 a0=bf9113ac a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4723 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.950:3821) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.950:3821) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.950:3821) : arch=i386 syscall=open success=yes exit=3 a0=bf9113ac a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4723 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.978:3822) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:50.978:3822) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.978:3822) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4725 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:50.986:3823) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:50.986:3823) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:50.986:3823) : arch=i386 syscall=open success=yes exit=3 a0=bfe0c9bc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4725 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:51.177:3825) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:57:51.177:3825) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:51.177:3825) : arch=i386 syscall=open success=yes exit=3 a0=bff6388c a1=8002 a2=0 a3=bff6388c items=1 ppid=4726 pid=4727 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:51.530:3826) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:51.530:3826) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:51.530:3826) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4731 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:51.161:3824) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:51.161:3824) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:51.161:3824) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4726 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.817:4032) : item=0 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.817:4032) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.817:4032) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80691c0 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.986:4034) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:57:52.986:4034) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.986:4034) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.817:4035) : item=0 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.817:4035) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.817:4035) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068d40 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.817:4037) : item=0 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.817:4037) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.817:4037) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f4d0 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.809:4039) : item=0 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.809:4039) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.809:4039) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068440 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.813:4040) : item=0 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.813:4040) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.813:4040) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80688c0 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.809:4043) : item=0 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.809:4043) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.809:4043) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f950 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.789:4044) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.789:4044) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.789:4044) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4753 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.797:4046) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.797:4046) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.797:4046) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4744 pid=4754 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.789:4047) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.789:4047) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.789:4047) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4745 pid=4752 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.705:4048) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:52.705:4048) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.705:4048) : arch=i386 syscall=open success=yes exit=3 a0=bf993f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4748 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.781:4049) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.781:4049) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.781:4049) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4751 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.697:4050) : item=0 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.697:4050) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.697:4050) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f050 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.697:4051) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:52.697:4051) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.697:4051) : arch=i386 syscall=open success=yes exit=3 a0=bf941f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4746 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.157:3827) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:52.157:3827) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.157:3827) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.221:3828) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.221:3828) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.221:3828) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=48800 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.221:3829) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.221:3829) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.221:3829) : arch=i386 syscall=open success=yes exit=5 a0=8120980 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.221:3830) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.221:3830) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.221:3830) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.221:3831) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.221:3831) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.221:3831) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.230:3832) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.230:3832) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.230:3832) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.235:3833) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.235:3833) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.235:3833) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c082 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.235:3834) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.235:3834) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.235:3834) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.238:3835) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.238:3835) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.238:3835) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.238:3836) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.238:3836) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.238:3836) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.238:3837) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.238:3837) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.238:3837) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.238:3838) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:52.238:3838) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.238:3838) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=20 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.238:3839) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.238:3839) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.238:3839) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.238:3840) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.238:3840) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.238:3840) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.242:3841) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.242:3841) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.242:3841) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.246:3842) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.246:3842) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.246:3842) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.246:3843) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.246:3843) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.246:3843) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.246:3844) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.246:3844) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.246:3844) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.250:3845) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.250:3845) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.250:3845) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.250:3846) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.250:3846) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.250:3846) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4734 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3847) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3847) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3847) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=98800 a2=b77ccff4 a3=811fa58 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3848) : item=0 name=/dev/.mdadm inode=6133 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3848) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3848) : arch=i386 syscall=open success=yes exit=3 a0=8134ac8 a1=98800 a2=b77ccff4 a3=8134ac8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3849) : item=0 name=/dev/.sysconfig inode=5853 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3849) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3849) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b77ccff4 a3=8127e38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3850) : item=0 name=/dev/.sysconfig/network inode=5854 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3850) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3850) : arch=i386 syscall=open success=yes exit=3 a0=8128578 a1=98800 a2=b77ccff4 a3=8128578 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.693:4053) : item=0 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.693:4053) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.693:4053) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3851) : item=0 name=/dev/.udev inode=5285 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3851) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3851) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3852) : item=0 name=/dev/.udev/db inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3852) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3852) : arch=i386 syscall=open success=yes exit=3 a0=812c1c8 a1=98800 a2=b77ccff4 a3=812c1c8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3853) : item=0 name=/dev/.udev/links inode=5781 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3853) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3853) : arch=i386 syscall=open success=yes exit=3 a0=812c1c8 a1=98800 a2=b77ccff4 a3=812c1c8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3854) : item=0 name=/dev/.udev/links/cdrom inode=6029 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3854) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3854) : arch=i386 syscall=open success=yes exit=3 a0=8128578 a1=98800 a2=b77ccff4 a3=8128578 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3855) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6038 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3855) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3855) : arch=i386 syscall=open success=yes exit=3 a0=812aa50 a1=98800 a2=b77ccff4 a3=812aa50 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3856) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part1 inode=24084 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3856) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3856) : arch=i386 syscall=open success=yes exit=3 a0=812a680 a1=98800 a2=b77ccff4 a3=812a680 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3857) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24067 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3857) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3857) : arch=i386 syscall=open success=yes exit=3 a0=812a680 a1=98800 a2=b77ccff4 a3=812a680 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.262:3858) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6040 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.262:3858) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.262:3858) : arch=i386 syscall=open success=yes exit=3 a0=812a418 a1=98800 a2=b77ccff4 a3=812a418 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3859) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part1 inode=24087 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3859) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3859) : arch=i386 syscall=open success=yes exit=3 a0=812a418 a1=98800 a2=b77ccff4 a3=812a418 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3860) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24070 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3860) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3860) : arch=i386 syscall=open success=yes exit=3 a0=812a528 a1=98800 a2=b77ccff4 a3=812a528 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3861) : item=0 name=/dev/.udev/links/disk\x2fby-label\x2fCDROM inode=6027 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3861) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3861) : arch=i386 syscall=open success=yes exit=3 a0=812a330 a1=98800 a2=b77ccff4 a3=812a330 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3862) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:01.1-scsi-1:0:0:0 inode=6025 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3862) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3862) : arch=i386 syscall=open success=yes exit=3 a0=812a6b8 a1=98800 a2=b77ccff4 a3=812a6b8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3863) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0 inode=6042 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3863) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3863) : arch=i386 syscall=open success=yes exit=3 a0=812a6b8 a1=98800 a2=b77ccff4 a3=812a6b8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3864) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part1 inode=24090 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3864) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3864) : arch=i386 syscall=open success=yes exit=3 a0=812a700 a1=98800 a2=b77ccff4 a3=812a700 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3865) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part2 inode=24073 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3865) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3865) : arch=i386 syscall=open success=yes exit=3 a0=812a680 a1=98800 a2=b77ccff4 a3=812a680 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3866) : item=0 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3866) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3866) : arch=i386 syscall=open success=yes exit=3 a0=812a680 a1=98800 a2=b77ccff4 a3=812a680 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3867) : item=0 name=/dev/.udev/links/dvd inode=6031 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3867) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3867) : arch=i386 syscall=open success=yes exit=3 a0=812a700 a1=98800 a2=b77ccff4 a3=812a700 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3868) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-0-event-kbd inode=5850 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3868) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3868) : arch=i386 syscall=open success=yes exit=3 a0=812a720 a1=98800 a2=b77ccff4 a3=812a720 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3869) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-event-mouse inode=5867 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3869) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3869) : arch=i386 syscall=open success=yes exit=3 a0=812a330 a1=98800 a2=b77ccff4 a3=812a330 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3870) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-mouse inode=5861 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3870) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3870) : arch=i386 syscall=open success=yes exit=3 a0=812a818 a1=98800 a2=b77ccff4 a3=812a818 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3871) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-pcspkr-event-spkr inode=5948 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3871) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3871) : arch=i386 syscall=open success=yes exit=3 a0=812a818 a1=98800 a2=b77ccff4 a3=812a818 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3872) : item=0 name=/dev/.udev/links/root inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3872) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3872) : arch=i386 syscall=open success=yes exit=3 a0=812a2e8 a1=98800 a2=b77ccff4 a3=812a2e8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3873) : item=0 name=/dev/.udev/links/rtc inode=6011 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3873) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3873) : arch=i386 syscall=open success=yes exit=3 a0=812a9c0 a1=98800 a2=b77ccff4 a3=812a9c0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3874) : item=0 name=/dev/.udev/links/scd0 inode=6023 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3874) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3874) : arch=i386 syscall=open success=yes exit=3 a0=812a7a8 a1=98800 a2=b77ccff4 a3=812a7a8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3875) : item=0 name=/dev/.udev/rules.d inode=5286 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3875) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3875) : arch=i386 syscall=open success=yes exit=3 a0=812c1c8 a1=98800 a2=b77ccff4 a3=812c1c8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3876) : item=0 name=/dev/.udev/watch inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3876) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3876) : arch=i386 syscall=open success=yes exit=3 a0=812c1c8 a1=98800 a2=b77ccff4 a3=812c1c8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3877) : item=0 name=/dev/block inode=3875 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3877) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3877) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3878) : item=0 name=/dev/bsg inode=3967 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3878) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3878) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3879) : item=0 name=/dev/char inode=2837 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3879) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3879) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3880) : item=0 name=/dev/disk inode=4020 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3880) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3880) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3881) : item=0 name=/dev/disk/by-id inode=4021 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3881) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3881) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b77ccff4 a3=8127e38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3882) : item=0 name=/dev/disk/by-label inode=4043 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3882) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3882) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b77ccff4 a3=8127e38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3883) : item=0 name=/dev/disk/by-path inode=4028 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3883) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3883) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b77ccff4 a3=8127e38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3884) : item=0 name=/dev/disk/by-uuid inode=4680 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3884) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3884) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b77ccff4 a3=8127e38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3885) : item=0 name=/dev/input inode=3125 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3885) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3885) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3886) : item=0 name=/dev/input/by-path inode=3137 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3886) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3886) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b77ccff4 a3=8127e38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3887) : item=0 name=/dev/mapper inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3887) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3887) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3888) : item=0 name=/dev/net inode=5241 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3888) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3888) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3889) : item=0 name=/dev/pts inode=1 dev=00:0b mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3889) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3889) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.266:3890) : item=0 name=/dev/shm inode=5252 dev=00:10 mode=dir,sticky,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.266:3890) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.266:3890) : arch=i386 syscall=open success=yes exit=3 a0=811b348 a1=98800 a2=b77ccff4 a3=811b348 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.270:3891) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:52.270:3891) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.270:3891) : arch=i386 syscall=open success=yes exit=3 a0=81203f8 a1=48800 a2=0 a3=8120350 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.270:3892) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:52.270:3892) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.270:3892) : arch=i386 syscall=open success=yes exit=5 a0=81203f8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.270:3893) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:52.270:3893) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.270:3893) : arch=i386 syscall=open success=yes exit=3 a0=81203f8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.270:3894) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:52.270:3894) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.270:3894) : arch=i386 syscall=open success=yes exit=3 a0=81203f8 a1=4c002 a2=0 a3=8120350 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3895) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:52.274:3895) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3895) : arch=i386 syscall=open success=yes exit=3 a0=81203f8 a1=4c002 a2=0 a3=8120350 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3896) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:52.274:3896) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3896) : arch=i386 syscall=open success=yes exit=3 a0=8120888 a1=48800 a2=0 a3=811fe38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3897) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:52.274:3897) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3897) : arch=i386 syscall=open success=yes exit=5 a0=8120888 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3898) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:52.274:3898) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3898) : arch=i386 syscall=open success=yes exit=3 a0=8120888 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3899) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:52.274:3899) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3899) : arch=i386 syscall=open success=yes exit=3 a0=8120888 a1=4c002 a2=0 a3=811fe38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3900) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:52.274:3900) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3900) : arch=i386 syscall=open success=yes exit=3 a0=8120888 a1=4c002 a2=0 a3=811fe38 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3901) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.274:3901) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3901) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=48800 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3902) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.274:3902) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3902) : arch=i386 syscall=open success=yes exit=5 a0=8120980 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3903) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.274:3903) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3903) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.274:3904) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.274:3904) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.274:3904) : arch=i386 syscall=open success=yes exit=3 a0=8120980 a1=4c002 a2=0 a3=81208f8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3905) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.278:3905) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3905) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4735 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3906) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:52.278:3906) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3906) : arch=i386 syscall=open success=yes exit=3 a0=8121ef8 a1=48800 a2=0 a3=8120b68 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3907) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:52.278:3907) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3907) : arch=i386 syscall=open success=yes exit=5 a0=8121ef8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3908) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:52.278:3908) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3908) : arch=i386 syscall=open success=yes exit=3 a0=8121ef8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3909) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:52.278:3909) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3909) : arch=i386 syscall=open success=yes exit=3 a0=8121ef8 a1=4c002 a2=0 a3=8120b68 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3910) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:52.278:3910) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3910) : arch=i386 syscall=open success=yes exit=3 a0=8121ef8 a1=4c002 a2=0 a3=8120b68 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3911) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:52.278:3911) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3911) : arch=i386 syscall=open success=yes exit=3 a0=8120438 a1=48800 a2=0 a3=811fc40 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3912) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:52.278:3912) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3912) : arch=i386 syscall=open success=yes exit=5 a0=8120438 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3913) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:52.278:3913) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3913) : arch=i386 syscall=open success=yes exit=3 a0=8120438 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.278:3914) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:52.278:3914) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.278:3914) : arch=i386 syscall=open success=yes exit=3 a0=8120438 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.473:3915) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:52.473:3915) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.473:3915) : arch=i386 syscall=open success=yes exit=3 a0=bf99ac2b a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4734 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.485:3916) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:52.485:3916) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.485:3916) : arch=i386 syscall=open success=yes exit=3 a0=bfe84f4c a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4735 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.529:3917) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:52.529:3917) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.529:3917) : arch=i386 syscall=open success=yes exit=3 a0=8120438 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.533:3918) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.533:3918) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.533:3918) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4737 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.541:3919) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:52.541:3919) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.541:3919) : arch=i386 syscall=open success=yes exit=3 a0=bf91ff3e a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4737 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.565:3920) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.565:3920) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.565:3920) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4736 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.573:3921) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.573:3921) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.573:3921) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4738 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.593:3922) : item=0 name=/dev/.udev/db/block:sda inode=24203 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.593:3922) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.593:3922) : arch=i386 syscall=open success=yes exit=3 a0=bf8127ac a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4738 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.601:3923) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:52.601:3923) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.601:3923) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1510 pid=4738 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.629:3924) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:52.629:3924) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.629:3924) : arch=i386 syscall=open success=yes exit=3 a0=81202f8 a1=48800 a2=0 a3=8120208 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.629:3925) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:52.629:3925) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.629:3925) : arch=i386 syscall=open success=yes exit=5 a0=81202f8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.629:3926) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:52.629:3926) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.629:3926) : arch=i386 syscall=open success=yes exit=3 a0=81202f8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.629:3927) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:52.629:3927) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.629:3927) : arch=i386 syscall=open success=yes exit=3 a0=81202f8 a1=4c002 a2=0 a3=8120208 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.637:3928) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:52.637:3928) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.637:3928) : arch=i386 syscall=open success=yes exit=3 a0=81202f8 a1=4c002 a2=0 a3=8120208 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.641:3929) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.641:3929) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.641:3929) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4739 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.641:3930) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:57:52.641:3930) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.641:3930) : arch=i386 syscall=open success=yes exit=3 a0=8121cd8 a1=48800 a2=0 a3=8120cb0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.641:3931) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:57:52.641:3931) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.641:3931) : arch=i386 syscall=open success=yes exit=5 a0=8121cd8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.641:3932) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:52.641:3932) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.641:3932) : arch=i386 syscall=open success=yes exit=3 a0=8120620 a1=48800 a2=0 a3=8120448 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.641:3933) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:52.641:3933) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.641:3933) : arch=i386 syscall=open success=yes exit=5 a0=8120620 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.641:3934) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:52.641:3934) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.641:3934) : arch=i386 syscall=open success=yes exit=3 a0=8120620 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.641:3935) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:52.641:3935) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.641:3935) : arch=i386 syscall=open success=yes exit=3 a0=8120620 a1=4c002 a2=0 a3=8120448 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.645:3936) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:52.645:3936) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.645:3936) : arch=i386 syscall=open success=yes exit=3 a0=8120620 a1=4c002 a2=0 a3=8120448 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.645:3937) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:57:52.645:3937) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.645:3937) : arch=i386 syscall=open success=yes exit=3 a0=8121cf8 a1=48800 a2=0 a3=8120d48 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.645:3938) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:57:52.645:3938) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.645:3938) : arch=i386 syscall=open success=yes exit=5 a0=8121cf8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.645:3939) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.645:3939) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.645:3939) : arch=i386 syscall=open success=yes exit=3 a0=81208a8 a1=48800 a2=0 a3=81206b0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.645:3940) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.645:3940) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.645:3940) : arch=i386 syscall=open success=yes exit=5 a0=81208a8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.645:3941) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.645:3941) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.645:3941) : arch=i386 syscall=open success=yes exit=3 a0=81208a8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.645:3942) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.645:3942) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.645:3942) : arch=i386 syscall=open success=yes exit=3 a0=81208a8 a1=4c002 a2=0 a3=81206b0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.645:3943) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.645:3943) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.645:3943) : arch=i386 syscall=open success=yes exit=3 a0=81208a8 a1=4c002 a2=0 a3=81206b0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3944) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:57:52.649:3944) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3944) : arch=i386 syscall=open success=yes exit=3 a0=8121d18 a1=48800 a2=0 a3=8120de0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3945) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:57:52.649:3945) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3945) : arch=i386 syscall=open success=yes exit=5 a0=8121d18 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3946) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:52.649:3946) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3946) : arch=i386 syscall=open success=yes exit=3 a0=81208c8 a1=48800 a2=0 a3=8120748 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3947) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:52.649:3947) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3947) : arch=i386 syscall=open success=yes exit=5 a0=81208c8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3948) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:52.649:3948) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3948) : arch=i386 syscall=open success=yes exit=3 a0=81208c8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3949) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:52.649:3949) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3949) : arch=i386 syscall=open success=yes exit=3 a0=81208c8 a1=4c002 a2=0 a3=8120748 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3950) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:52.649:3950) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3950) : arch=i386 syscall=open success=yes exit=3 a0=81208c8 a1=4c002 a2=0 a3=8120748 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3951) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:57:52.649:3951) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3951) : arch=i386 syscall=open success=yes exit=3 a0=8121d38 a1=48800 a2=0 a3=8120e78 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3952) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:57:52.649:3952) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3952) : arch=i386 syscall=open success=yes exit=5 a0=8121d38 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3953) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:52.649:3953) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3953) : arch=i386 syscall=open success=yes exit=3 a0=8120130 a1=48800 a2=0 a3=8120088 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3954) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:52.649:3954) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3954) : arch=i386 syscall=open success=yes exit=5 a0=8120130 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3955) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:52.649:3955) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3955) : arch=i386 syscall=open success=yes exit=3 a0=8120130 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3956) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:52.649:3956) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3956) : arch=i386 syscall=open success=yes exit=3 a0=8120130 a1=4c002 a2=0 a3=8120088 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3957) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:52.649:3957) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3957) : arch=i386 syscall=open success=yes exit=3 a0=8120130 a1=4c002 a2=0 a3=8120088 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3958) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:57:52.649:3958) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3958) : arch=i386 syscall=open success=yes exit=3 a0=8121d58 a1=48800 a2=0 a3=8120f10 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3959) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:57:52.649:3959) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3959) : arch=i386 syscall=open success=yes exit=5 a0=8121d58 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3960) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:52.649:3960) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3960) : arch=i386 syscall=open success=yes exit=3 a0=8120010 a1=48800 a2=0 a3=811ff20 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3961) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:52.649:3961) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3961) : arch=i386 syscall=open success=yes exit=5 a0=8120010 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3962) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:52.649:3962) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3962) : arch=i386 syscall=open success=yes exit=3 a0=8120010 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3963) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:52.649:3963) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3963) : arch=i386 syscall=open success=yes exit=3 a0=8120010 a1=4c002 a2=0 a3=811ff20 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3964) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:52.649:3964) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3964) : arch=i386 syscall=open success=yes exit=3 a0=8120010 a1=4c002 a2=0 a3=811ff20 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3965) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:57:52.649:3965) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3965) : arch=i386 syscall=open success=yes exit=3 a0=8121d78 a1=48800 a2=0 a3=8120fa8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3966) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:57:52.649:3966) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3966) : arch=i386 syscall=open success=yes exit=5 a0=8121d78 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3967) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:52.649:3967) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3967) : arch=i386 syscall=open success=yes exit=3 a0=81208e8 a1=48800 a2=0 a3=81207e0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3968) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:52.649:3968) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3968) : arch=i386 syscall=open success=yes exit=5 a0=81208e8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3969) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:52.649:3969) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3969) : arch=i386 syscall=open success=yes exit=3 a0=81208e8 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3970) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:52.649:3970) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3970) : arch=i386 syscall=open success=yes exit=3 a0=81208e8 a1=4c002 a2=0 a3=81207e0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3971) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:52.649:3971) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3971) : arch=i386 syscall=open success=yes exit=3 a0=81208e8 a1=4c002 a2=0 a3=81207e0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.649:3972) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:57:52.649:3972) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.649:3972) : arch=i386 syscall=open success=yes exit=3 a0=8121d98 a1=48800 a2=0 a3=8121040 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3973) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:57:52.653:3973) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3973) : arch=i386 syscall=open success=yes exit=5 a0=8121d98 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3974) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:52.653:3974) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3974) : arch=i386 syscall=open success=yes exit=3 a0=8120640 a1=48800 a2=0 a3=81204e0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3975) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:52.653:3975) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3975) : arch=i386 syscall=open success=yes exit=5 a0=8120640 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3976) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:52.653:3976) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3976) : arch=i386 syscall=open success=yes exit=3 a0=8120640 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3977) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:52.653:3977) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3977) : arch=i386 syscall=open success=yes exit=3 a0=8120640 a1=4c002 a2=0 a3=81204e0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3978) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:52.653:3978) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3978) : arch=i386 syscall=open success=yes exit=3 a0=8120640 a1=4c002 a2=0 a3=81204e0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3979) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:52.653:3979) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3979) : arch=i386 syscall=open success=yes exit=3 a0=8120660 a1=48800 a2=0 a3=8120578 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3980) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:52.653:3980) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3980) : arch=i386 syscall=open success=yes exit=5 a0=8120660 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3981) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:52.653:3981) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3981) : arch=i386 syscall=open success=yes exit=3 a0=8120660 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3982) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:52.653:3982) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3982) : arch=i386 syscall=open success=yes exit=3 a0=8120660 a1=4c002 a2=0 a3=8120578 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3983) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:52.653:3983) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3983) : arch=i386 syscall=open success=yes exit=3 a0=8120660 a1=4c002 a2=0 a3=8120578 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3984) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:52.653:3984) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3984) : arch=i386 syscall=open success=yes exit=3 a0=811fe00 a1=48800 a2=0 a3=811fd78 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3985) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:52.653:3985) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3985) : arch=i386 syscall=open success=yes exit=5 a0=811fe00 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3986) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:52.653:3986) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3986) : arch=i386 syscall=open success=yes exit=3 a0=811fe00 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3987) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:52.653:3987) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3987) : arch=i386 syscall=open success=yes exit=3 a0=811fe00 a1=4c002 a2=0 a3=811fd78 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3988) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:52.653:3988) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3988) : arch=i386 syscall=open success=yes exit=3 a0=811fe00 a1=4c002 a2=0 a3=811fd78 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3989) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:52.653:3989) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3989) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=48800 a2=0 a3=811fba8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3990) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:52.653:3990) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3990) : arch=i386 syscall=open success=yes exit=5 a0=811fc30 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3991) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:52.653:3991) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3991) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3992) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:52.653:3992) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3992) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3993) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:52.653:3993) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3993) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3994) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:52.653:3994) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3994) : arch=i386 syscall=open success=yes exit=3 a0=811ff10 a1=48800 a2=0 a3=811fcd8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3995) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:52.653:3995) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3995) : arch=i386 syscall=open success=yes exit=5 a0=811ff10 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.653:3996) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:52.653:3996) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.653:3996) : arch=i386 syscall=open success=yes exit=3 a0=811ff10 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:3997) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:52.657:3997) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:3997) : arch=i386 syscall=open success=yes exit=3 a0=811ff10 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:3998) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:52.657:3998) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:3998) : arch=i386 syscall=open success=yes exit=3 a0=811ff10 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:3999) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:52.657:3999) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:3999) : arch=i386 syscall=open success=yes exit=3 a0=8120058 a1=48800 a2=0 a3=811fa68 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4000) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:52.657:4000) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4000) : arch=i386 syscall=open success=yes exit=5 a0=8120058 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4001) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:52.657:4001) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4001) : arch=i386 syscall=open success=yes exit=3 a0=8120058 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4002) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:52.657:4002) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4002) : arch=i386 syscall=open success=yes exit=3 a0=8120058 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4003) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:52.657:4003) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4003) : arch=i386 syscall=open success=yes exit=3 a0=8120058 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4004) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:52.657:4004) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4004) : arch=i386 syscall=open success=yes exit=3 a0=8120078 a1=48800 a2=0 a3=811fb08 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4005) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:52.657:4005) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4005) : arch=i386 syscall=open success=yes exit=5 a0=8120078 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4006) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:52.657:4006) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4006) : arch=i386 syscall=open success=yes exit=3 a0=8120078 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4007) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:52.657:4007) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4007) : arch=i386 syscall=open success=yes exit=3 a0=8120078 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4008) : item=0 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.657:4008) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4008) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4009) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:52.657:4009) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4009) : arch=i386 syscall=open success=yes exit=3 a0=8120078 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4010) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:52.657:4010) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4010) : arch=i386 syscall=open success=yes exit=3 a0=81206a0 a1=48800 a2=0 a3=8120140 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4011) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:52.657:4011) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4011) : arch=i386 syscall=open success=yes exit=5 a0=81206a0 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4012) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:52.657:4012) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4012) : arch=i386 syscall=open success=yes exit=3 a0=81206a0 a1=8000 a2=0 a3=0 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4013) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:52.657:4013) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4013) : arch=i386 syscall=open success=yes exit=3 a0=81206a0 a1=4c002 a2=0 a3=8120140 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4014) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:52.657:4014) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4014) : arch=i386 syscall=open success=yes exit=3 a0=81206a0 a1=4c002 a2=0 a3=8120140 items=1 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4015) : item=1 name=/dev/.udev/watch/11 inode=5501 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.657:4015) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.657:4015) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4015) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.657:4016) : item=2 name=/dev/disk/by-id/lvm2-pvuuid-w65Fdn-M8Eo-JBsn-2YyD-zTPO-DfSZ-UjQp7j inode=24305 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.657:4016) : item=1 name=/dev/disk/by-id/ inode=4021 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.657:4016) : item=0 name=/dev/sda2 
>type=CWD msg=audit(04/20/10 11:57:52.657:4016) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:52.657:4016) : arch=i386 syscall=symlink success=yes exit=0 a0=8134ab8 a1=8128698 a2=8106ff4 a3=1 items=3 ppid=4731 pid=4733 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=pvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.661:4017) : item=0 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.661:4017) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.661:4017) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.661:4018) : item=1 name=/dev/.udev/watch/19 inode=5688 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.661:4018) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.661:4018) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.661:4018) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.673:4019) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.673:4019) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.673:4019) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4746 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.681:4020) : item=0 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.681:4020) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.681:4020) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.681:4021) : item=1 name=/dev/.udev/watch/23 inode=5760 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.681:4021) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.681:4021) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.681:4021) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.681:4022) : item=0 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.681:4022) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.681:4022) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.681:4023) : item=1 name=/dev/.udev/watch/17 inode=5672 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.681:4023) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.681:4023) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.681:4023) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.681:4024) : item=0 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.681:4024) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.681:4024) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.681:4025) : item=1 name=/dev/.udev/watch/26 inode=5775 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.681:4025) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.681:4025) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.681:4025) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.681:4026) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:52.681:4026) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.681:4026) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4748 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.685:4027) : item=0 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.685:4027) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.685:4027) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.685:4028) : item=1 name=/dev/.udev/watch/24 inode=5765 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.685:4028) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.685:4028) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.685:4028) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.693:4029) : item=0 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.693:4029) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.693:4029) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:52.693:4030) : item=1 name=/dev/.udev/watch/21 inode=5750 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:52.693:4030) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:52.693:4030) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:52.693:4030) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.222:4033) : item=1 name=/dev/.udev/watch/16 inode=5660 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.222:4033) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.222:4033) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.222:4033) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.222:4036) : item=1 name=/dev/.udev/watch/10 inode=5496 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.222:4036) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.222:4036) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.222:4036) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.227:4038) : item=1 name=/dev/.udev/watch/12 inode=5506 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.227:4038) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.227:4038) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.227:4038) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.230:4041) : item=1 name=/dev/.udev/watch/15 inode=5642 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.230:4041) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.230:4041) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.230:4041) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.230:4042) : item=1 name=/dev/.udev/watch/18 inode=5677 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.230:4042) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.230:4042) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.230:4042) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.234:4045) : item=1 name=/dev/.udev/watch/22 inode=5755 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.234:4045) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.234:4045) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.234:4045) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.242:4052) : item=1 name=/dev/.udev/watch/25 inode=5770 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.242:4052) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.242:4052) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.242:4052) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.247:4054) : item=1 name=/dev/.udev/watch/20 inode=5697 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.247:4054) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.247:4054) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.247:4054) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.270:4055) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24331 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.270:4055) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.270:4055) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:57:53.270:4055) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.270:4055) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.270:4056) : item=4 name=/dev/.udev/db/block:ram2 inode=24331 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.270:4056) : item=3 name=/dev/.udev/db/block:ram2 inode=5689 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.270:4056) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24331 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.270:4056) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.270:4056) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.270:4056) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.270:4056) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.438:4057) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.438:4057) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.438:4057) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4768 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.310:4058) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:53.310:4058) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.310:4058) : arch=i386 syscall=open success=yes exit=3 a0=bf8c6f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4745 pid=4752 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.306:4059) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.306:4059) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.306:4059) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4756 pid=4771 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.306:4060) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.306:4060) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.306:4060) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4757 pid=4770 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.294:4061) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.294:4061) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.294:4061) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4760 pid=4767 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.298:4062) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:53.298:4062) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.298:4062) : arch=i386 syscall=open success=yes exit=3 a0=bfd51f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4753 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.298:4063) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.298:4063) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.298:4063) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4750 pid=4766 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.306:4064) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.306:4064) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.306:4064) : arch=i386 syscall=open success=yes exit=3 a0=bfa3af4b a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4751 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.298:4065) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.298:4065) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.298:4065) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4747 pid=4763 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.294:4066) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.294:4066) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.294:4066) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4759 pid=4762 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.310:4067) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.310:4067) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.310:4067) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4749 pid=4769 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.270:4068) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24332 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.270:4068) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.270:4068) : item=0 name=ram1 block/1:1 
>type=CWD msg=audit(04/20/10 11:57:53.270:4068) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.270:4068) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.706:4088) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:53.706:4088) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.706:4088) : arch=i386 syscall=open success=yes exit=3 a0=bfdf1f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4747 pid=4763 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.001:4031) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:53.001:4031) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.001:4031) : arch=i386 syscall=open success=yes exit=3 a0=bfabcf1b a1=8800 a2=0 a3=bfabcf1b items=1 ppid=1510 pid=4739 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.650:4069) : item=4 name=/dev/.udev/db/block:ram1 inode=24332 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.650:4069) : item=3 name=/dev/.udev/db/block:ram1 inode=5502 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.650:4069) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24332 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.650:4069) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.650:4069) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.650:4069) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.650:4069) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.650:4070) : item=0 name=/dev/block/1:1 inode=3882 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.650:4070) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.650:4070) : arch=i386 syscall=readlink success=yes exit=7 a0=8080498 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.654:4071) : item=0 name=/dev/.udev/watch/67 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.654:4071) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.654:4071) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.654:4072) : item=2 name=/dev/.udev/watch/67 inode=24343 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.654:4072) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.654:4072) : item=0 name=/devices/virtual/block/ram1 
>type=CWD msg=audit(04/20/10 11:57:53.654:4072) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.654:4072) : arch=i386 syscall=symlink success=yes exit=0 a0=807b52c a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.654:4073) : item=1 name=/dev/.udev/db/block:ram1.tmp inode=24344 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.654:4073) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.654:4073) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.654:4073) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8080a68 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.654:4074) : item=4 name=/dev/.udev/db/block:ram1 inode=24344 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.654:4074) : item=3 name=/dev/.udev/db/block:ram1 inode=24332 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.654:4074) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24344 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.654:4074) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.654:4074) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.654:4074) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.654:4074) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.654:4075) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.654:4075) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.654:4075) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.654:4076) : item=0 name=/dev/.udev/watch/68 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.654:4076) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.654:4076) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80793a0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.306:4077) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:53.306:4077) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.306:4077) : arch=i386 syscall=open success=yes exit=3 a0=bf9e5f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4744 pid=4754 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.294:4078) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.294:4078) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.294:4078) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4755 pid=4764 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.869:4079) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:53.869:4079) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.869:4079) : arch=i386 syscall=open success=yes exit=3 a0=bfa7f7ac a1=8800 a2=0 a3=bfa7fb64 items=1 ppid=1510 pid=4768 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.702:4080) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:53.702:4080) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.702:4080) : arch=i386 syscall=open success=yes exit=3 a0=bff54f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4756 pid=4771 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.626:4081) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24340 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.626:4081) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.626:4081) : item=0 name=ram6 block/1:6 
>type=CWD msg=audit(04/20/10 11:57:53.626:4081) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.626:4081) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.294:4082) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.294:4082) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.294:4082) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4758 pid=4765 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.694:4083) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:53.694:4083) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.694:4083) : arch=i386 syscall=open success=yes exit=3 a0=bfdb0f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4760 pid=4767 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.678:4084) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:53.678:4084) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.678:4084) : arch=i386 syscall=open success=yes exit=3 a0=bfad2f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4759 pid=4762 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.698:4089) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:53.698:4089) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.698:4089) : arch=i386 syscall=open success=yes exit=3 a0=bfd36f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4749 pid=4769 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.698:4090) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:53.698:4090) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.698:4090) : arch=i386 syscall=open success=yes exit=3 a0=bf8f9f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4750 pid=4766 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.678:4091) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24348 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.678:4091) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.678:4091) : item=0 name=ram4 block/1:4 
>type=CWD msg=audit(04/20/10 11:57:53.678:4091) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.678:4091) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.706:4098) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:53.706:4098) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.706:4098) : arch=i386 syscall=open success=yes exit=3 a0=bf85af46 a1=8000 a2=0 a3=804f008 items=1 ppid=4757 pid=4770 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.666:4099) : item=0 name=/dev/.udev/db/block:ram1 inode=24344 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:53.666:4099) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.666:4099) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.482:4101) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:53.482:4101) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:53.482:4101) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.594:4104) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:53.594:4104) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.594:4104) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4772 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.682:4105) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24349 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.682:4105) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.682:4105) : item=0 name=ram5 block/1:5 
>type=CWD msg=audit(04/20/10 11:57:53.682:4105) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.682:4105) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:53.658:4120) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24347 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.658:4120) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:53.658:4120) : item=0 name=ram3 block/1:3 
>type=CWD msg=audit(04/20/10 11:57:53.658:4120) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:53.658:4120) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.026:4086) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=24351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.026:4086) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.026:4086) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.026:4086) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807de10 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.026:4087) : item=4 name=/dev/.udev/db/block:ram2 inode=24351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.026:4087) : item=3 name=/dev/.udev/db/block:ram2 inode=24331 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.026:4087) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.026:4087) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.026:4087) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.026:4087) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.026:4087) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.961:4370) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24502 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.961:4370) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.961:4370) : item=0 name=ram11 block/1:11 
>type=CWD msg=audit(04/20/10 11:57:54.961:4370) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.961:4370) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.929:4380) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:54.929:4380) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.929:4380) : arch=i386 syscall=open success=yes exit=3 a0=bfb76f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4758 pid=4793 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.870:4417) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:54.870:4417) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.870:4417) : arch=i386 syscall=open success=yes exit=3 a0=bfd0ef4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4791 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.026:4085) : item=2 name=/dev/.udev/watch/68 inode=24350 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.026:4085) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.026:4085) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:57:54.026:4085) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.026:4085) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b4c a1=bff1fbfc a2=8068008 a3=80793a0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.034:4092) : item=4 name=/dev/.udev/db/block:ram4 inode=24348 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.034:4092) : item=3 name=/dev/.udev/db/block:ram4 inode=5767 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.034:4092) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24348 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.034:4092) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.034:4092) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.034:4092) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.034:4092) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.038:4093) : item=0 name=/dev/block/1:4 inode=3922 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.038:4093) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.038:4093) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.038:4094) : item=0 name=/dev/.udev/watch/69 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.038:4094) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.038:4094) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807d700 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.038:4095) : item=2 name=/dev/.udev/watch/69 inode=24354 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.038:4095) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.038:4095) : item=0 name=/devices/virtual/block/ram4 
>type=CWD msg=audit(04/20/10 11:57:54.038:4095) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.038:4095) : arch=i386 syscall=symlink success=yes exit=0 a0=807d844 a1=bff1fbfc a2=8068008 a3=807d700 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.038:4096) : item=1 name=/dev/.udev/db/block:ram4.tmp inode=24355 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.038:4096) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.038:4096) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.038:4096) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ed90 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.038:4097) : item=4 name=/dev/.udev/db/block:ram4 inode=24355 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.038:4097) : item=3 name=/dev/.udev/db/block:ram4 inode=24348 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.038:4097) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24355 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.038:4097) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.038:4097) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.038:4097) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.038:4097) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.042:4100) : item=1 name=/dev/.udev/watch/67 inode=24343 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.042:4100) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.042:4100) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.042:4100) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.050:4102) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:54.050:4102) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.050:4102) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=4c002 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.050:4103) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:54.050:4103) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.050:4103) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.054:4106) : item=4 name=/dev/.udev/db/block:ram5 inode=24349 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4106) : item=3 name=/dev/.udev/db/block:ram5 inode=5761 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4106) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24349 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4106) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4106) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.054:4106) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.054:4106) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.054:4107) : item=0 name=/dev/block/1:5 inode=3897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.054:4107) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.054:4107) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.054:4108) : item=0 name=/dev/.udev/watch/70 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.054:4108) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.054:4108) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807db20 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.054:4109) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24361 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4109) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4109) : item=0 name=ram14 block/1:14 
>type=CWD msg=audit(04/20/10 11:57:54.054:4109) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.054:4109) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.054:4110) : item=2 name=/dev/.udev/watch/70 inode=24362 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4110) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4110) : item=0 name=/devices/virtual/block/ram5 
>type=CWD msg=audit(04/20/10 11:57:54.054:4110) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.054:4110) : arch=i386 syscall=symlink success=yes exit=0 a0=807952c a1=bff1fbfc a2=8068008 a3=807db20 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.054:4111) : item=4 name=/dev/.udev/db/block:ram14 inode=24361 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4111) : item=3 name=/dev/.udev/db/block:ram14 inode=5497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4111) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24361 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4111) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4111) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.054:4111) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.054:4111) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.054:4112) : item=1 name=/dev/.udev/db/block:ram5.tmp inode=24363 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.054:4112) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.054:4112) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.054:4112) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f1b8 items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.074:4113) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24366 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.074:4113) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.074:4113) : item=0 name=ram11 block/1:11 
>type=CWD msg=audit(04/20/10 11:57:54.074:4113) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.074:4113) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.146:4114) : item=4 name=/dev/.udev/db/block:ram6 inode=24340 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.146:4114) : item=3 name=/dev/.udev/db/block:ram6 inode=5776 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.146:4114) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24340 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.146:4114) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.146:4114) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.146:4114) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.146:4114) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.146:4115) : item=0 name=/dev/block/1:6 inode=3887 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.146:4115) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.146:4115) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.146:4116) : item=0 name=/dev/.udev/watch/72 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.146:4116) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.146:4116) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807df48 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.146:4117) : item=2 name=/dev/.udev/watch/72 inode=24377 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.146:4117) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.146:4117) : item=0 name=/devices/virtual/block/ram6 
>type=CWD msg=audit(04/20/10 11:57:54.146:4117) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.146:4117) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807df48 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.146:4118) : item=1 name=/dev/.udev/db/block:ram6.tmp inode=24378 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.146:4118) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.146:4118) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.146:4118) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f5e0 items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.150:4119) : item=4 name=/dev/.udev/db/block:ram6 inode=24378 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4119) : item=3 name=/dev/.udev/db/block:ram6 inode=24340 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4119) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24378 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4119) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4119) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.150:4119) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.150:4119) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.150:4121) : item=4 name=/dev/.udev/db/block:ram3 inode=24347 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4121) : item=3 name=/dev/.udev/db/block:ram3 inode=5673 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4121) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24347 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4121) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4121) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.150:4121) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.150:4121) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.150:4122) : item=0 name=/dev/block/1:3 inode=3947 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.150:4122) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.150:4122) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.150:4123) : item=0 name=/dev/.udev/watch/73 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.150:4123) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.150:4123) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.150:4124) : item=2 name=/dev/.udev/watch/73 inode=24381 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4124) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4124) : item=0 name=/devices/virtual/block/ram3 
>type=CWD msg=audit(04/20/10 11:57:54.150:4124) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.150:4124) : arch=i386 syscall=symlink success=yes exit=0 a0=807fdac a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.150:4125) : item=1 name=/dev/.udev/db/block:ram3.tmp inode=24382 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4125) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.150:4125) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.150:4125) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e5b8 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.150:4126) : item=4 name=/dev/.udev/db/block:ram3 inode=24382 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4126) : item=3 name=/dev/.udev/db/block:ram3 inode=24347 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4126) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24382 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4126) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.150:4126) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.150:4126) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.150:4126) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.086:4127) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:54.086:4127) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.086:4127) : arch=i386 syscall=open success=yes exit=3 a0=bf987f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4758 pid=4765 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.154:4128) : item=4 name=/dev/.udev/db/block:ram5 inode=24363 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.154:4128) : item=3 name=/dev/.udev/db/block:ram5 inode=24349 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.154:4128) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24363 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.154:4128) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.154:4128) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.154:4128) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.154:4128) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.082:4129) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24367 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.082:4129) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.082:4129) : item=0 name=ram8 block/1:8 
>type=CWD msg=audit(04/20/10 11:57:54.082:4129) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.082:4129) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.082:4130) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:54.082:4130) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.082:4130) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.074:4131) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.074:4131) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.074:4131) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4773 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.062:4132) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24364 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.062:4132) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.062:4132) : item=0 name=ram9 block/1:9 
>type=CWD msg=audit(04/20/10 11:57:54.062:4132) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.062:4132) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.162:4133) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24384 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.162:4133) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.162:4133) : item=0 name=ram13 block/1:13 
>type=CWD msg=audit(04/20/10 11:57:54.162:4133) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.162:4133) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4134) : item=4 name=/dev/.udev/db/block:ram13 inode=24384 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4134) : item=3 name=/dev/.udev/db/block:ram13 inode=5678 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4134) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24384 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4134) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4134) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.226:4134) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4134) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4135) : item=0 name=/dev/block/1:13 inode=3939 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.226:4135) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4135) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4136) : item=4 name=/dev/.udev/db/block:ram9 inode=24364 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4136) : item=3 name=/dev/.udev/db/block:ram9 inode=5771 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4136) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24364 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4136) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4136) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.226:4136) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4136) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4137) : item=0 name=/dev/block/1:9 inode=3940 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.226:4137) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4137) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4138) : item=0 name=/dev/.udev/watch/74 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.226:4138) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4138) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068440 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4139) : item=2 name=/dev/.udev/watch/74 inode=24387 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4139) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4139) : item=0 name=/devices/virtual/block/ram13 
>type=CWD msg=audit(04/20/10 11:57:54.226:4139) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4139) : arch=i386 syscall=symlink success=yes exit=0 a0=8068564 a1=bff1fbfc a2=8068008 a3=8068440 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4140) : item=1 name=/dev/.udev/db/block:ram13.tmp inode=24388 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4140) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.226:4140) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4140) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8069ca8 items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4141) : item=4 name=/dev/.udev/db/block:ram13 inode=24388 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4141) : item=3 name=/dev/.udev/db/block:ram13 inode=24384 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4141) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24388 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4141) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.226:4141) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.226:4141) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4141) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.166:4142) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.166:4142) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.166:4142) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4774 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.170:4143) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:54.170:4143) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.170:4143) : arch=i386 syscall=open success=yes exit=3 a0=bfa7f7ac a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4768 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.066:4144) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24365 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.066:4144) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.066:4144) : item=0 name=ram15 block/1:15 
>type=CWD msg=audit(04/20/10 11:57:54.066:4144) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.066:4144) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.074:4145) : item=0 name=/dev/.udev/db/block:ram2 inode=24351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.074:4145) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.074:4145) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.250:4146) : item=1 name=/dev/.udev/watch/68 inode=24350 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.250:4146) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.250:4146) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.250:4146) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.258:4147) : item=0 name=/dev/block/1:14 inode=3912 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.258:4147) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.258:4147) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.258:4148) : item=4 name=/dev/.udev/db/block:ram15 inode=24365 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4148) : item=3 name=/dev/.udev/db/block:ram15 inode=5661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4148) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24365 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4148) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4148) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.258:4148) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.258:4148) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.258:4149) : item=0 name=/dev/block/1:15 inode=3927 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.258:4149) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.258:4149) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.258:4150) : item=0 name=/dev/.udev/watch/76 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.258:4150) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.258:4150) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068d40 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.258:4151) : item=2 name=/dev/.udev/watch/76 inode=24394 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4151) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4151) : item=0 name=/devices/virtual/block/ram15 
>type=CWD msg=audit(04/20/10 11:57:54.258:4151) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.258:4151) : arch=i386 syscall=symlink success=yes exit=0 a0=8068e64 a1=bff1fbfc a2=8068008 a3=8068d40 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.258:4152) : item=1 name=/dev/.udev/db/block:ram15.tmp inode=24395 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4152) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.258:4152) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.258:4152) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a5a8 items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.258:4153) : item=4 name=/dev/.udev/db/block:ram15 inode=24395 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4153) : item=3 name=/dev/.udev/db/block:ram15 inode=24365 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4153) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24395 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4153) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.258:4153) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.258:4153) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.258:4153) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.074:4154) : item=0 name=/dev/.udev/db/block:ram0 inode=24288 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.074:4154) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.074:4154) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807db20 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.262:4155) : item=1 name=/dev/.udev/watch/65 inode=24287 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.262:4155) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.262:4155) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.262:4155) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.074:4156) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:54.074:4156) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.074:4156) : arch=i386 syscall=open success=yes exit=3 a0=bfcfcf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4755 pid=4764 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.082:4157) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24369 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.082:4157) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.082:4157) : item=0 name=ram12 block/1:12 
>type=CWD msg=audit(04/20/10 11:57:54.082:4157) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.082:4157) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.310:4158) : item=4 name=/dev/.udev/db/block:ram12 inode=24369 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4158) : item=3 name=/dev/.udev/db/block:ram12 inode=5643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4158) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24369 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4158) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4158) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.310:4158) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.310:4158) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.310:4159) : item=4 name=/dev/.udev/db/block:ram8 inode=24367 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4159) : item=3 name=/dev/.udev/db/block:ram8 inode=5751 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4159) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24367 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4159) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4159) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.310:4159) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.310:4159) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.310:4160) : item=0 name=/dev/block/1:12 inode=3902 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.310:4160) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.310:4160) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.310:4161) : item=4 name=/dev/.udev/db/block:ram11 inode=24366 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4161) : item=3 name=/dev/.udev/db/block:ram11 inode=5756 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4161) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24366 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4161) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.310:4161) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.310:4161) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.310:4161) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.310:4162) : item=0 name=/dev/block/1:11 inode=3907 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.310:4162) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.310:4162) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.310:4163) : item=0 name=/dev/.udev/watch/77 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.310:4163) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.310:4163) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f950 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.082:4164) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.082:4164) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.082:4164) : item=0 name=ram7 block/1:7 
>type=CWD msg=audit(04/20/10 11:57:54.082:4164) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.082:4164) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.334:4165) : item=2 name=/dev/.udev/watch/77 inode=24405 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.334:4165) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.334:4165) : item=0 name=/devices/virtual/block/ram12 
>type=CWD msg=audit(04/20/10 11:57:54.334:4165) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.334:4165) : arch=i386 syscall=symlink success=yes exit=0 a0=807fa74 a1=bff1fbfc a2=8068008 a3=807f950 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.334:4166) : item=1 name=/dev/.udev/db/block:ram12.tmp inode=24406 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.334:4166) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.334:4166) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.334:4166) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8069828 items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.334:4167) : item=4 name=/dev/.udev/db/block:ram12 inode=24406 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.334:4167) : item=3 name=/dev/.udev/db/block:ram12 inode=24369 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.334:4167) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24406 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.334:4167) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.334:4167) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.334:4167) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.334:4167) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.310:4168) : item=0 name=/dev/.udev/watch/78 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.310:4168) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.310:4168) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f4d0 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.342:4169) : item=2 name=/dev/.udev/watch/78 inode=24407 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4169) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4169) : item=0 name=/devices/virtual/block/ram11 
>type=CWD msg=audit(04/20/10 11:57:54.342:4169) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.342:4169) : arch=i386 syscall=symlink success=yes exit=0 a0=807f5f4 a1=bff1fbfc a2=8068008 a3=807f4d0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.342:4170) : item=1 name=/dev/.udev/db/block:ram11.tmp inode=24408 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4170) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.342:4170) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.342:4170) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f950 items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.342:4171) : item=4 name=/dev/.udev/db/block:ram7 inode=24368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4171) : item=3 name=/dev/.udev/db/block:ram7 inode=5698 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4171) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4171) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4171) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.342:4171) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.342:4171) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.342:4172) : item=4 name=/dev/.udev/db/block:ram11 inode=24408 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4172) : item=3 name=/dev/.udev/db/block:ram11 inode=24366 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4172) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24408 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4172) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.342:4172) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.342:4172) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.342:4172) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.342:4173) : item=0 name=/dev/block/1:7 inode=3917 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.342:4173) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.342:4173) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.226:4174) : item=0 name=/dev/.udev/watch/75 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.226:4174) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.226:4174) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.346:4175) : item=2 name=/dev/.udev/watch/75 inode=24409 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.346:4175) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.346:4175) : item=0 name=/devices/virtual/block/ram9 
>type=CWD msg=audit(04/20/10 11:57:54.346:4175) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.346:4175) : arch=i386 syscall=symlink success=yes exit=0 a0=807eccc a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.346:4176) : item=1 name=/dev/.udev/db/block:ram9.tmp inode=24410 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.346:4176) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.346:4176) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.346:4176) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f050 items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.346:4177) : item=4 name=/dev/.udev/db/block:ram9 inode=24410 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.346:4177) : item=3 name=/dev/.udev/db/block:ram9 inode=24364 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.346:4177) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24410 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.346:4177) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.346:4177) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.346:4177) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.346:4177) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.230:4178) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:54.230:4178) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.230:4178) : arch=i386 syscall=open success=yes exit=3 a0=bf94ff4b a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4773 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.318:4179) : item=0 name=/dev/block/1:8 inode=3952 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.318:4179) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.318:4179) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.354:4180) : item=0 name=/dev/.udev/watch/80 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.354:4180) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.354:4180) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e7c0 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.354:4181) : item=2 name=/dev/.udev/watch/80 inode=24413 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4181) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4181) : item=0 name=/devices/virtual/block/ram8 
>type=CWD msg=audit(04/20/10 11:57:54.354:4181) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.354:4181) : arch=i386 syscall=symlink success=yes exit=0 a0=807e894 a1=bff1fbfc a2=8068008 a3=807e7c0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.354:4182) : item=1 name=/dev/.udev/db/block:ram8.tmp inode=24414 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4182) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.354:4182) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.354:4182) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef48 items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.354:4183) : item=4 name=/dev/.udev/db/block:ram8 inode=24414 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4183) : item=3 name=/dev/.udev/db/block:ram8 inode=24367 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4183) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24414 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4183) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4183) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.354:4183) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.354:4183) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.318:4184) : item=0 name=/dev/.udev/watch/79 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.318:4184) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.318:4184) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80688c0 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.354:4185) : item=2 name=/dev/.udev/watch/79 inode=24415 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4185) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.354:4185) : item=0 name=/devices/virtual/block/ram14 
>type=CWD msg=audit(04/20/10 11:57:54.354:4185) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.354:4185) : arch=i386 syscall=symlink success=yes exit=0 a0=80689e4 a1=bff1fbfc a2=8068008 a3=80688c0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.334:4186) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.334:4186) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.334:4186) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4777 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.278:4187) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.278:4187) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.278:4187) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4776 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.370:4188) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24417 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.370:4188) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.370:4188) : item=0 name=ram10 block/1:10 
>type=CWD msg=audit(04/20/10 11:57:54.370:4188) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.370:4188) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.367:4189) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24416 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.367:4189) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.367:4189) : item=0 name=ram1 block/1:1 
>type=CWD msg=audit(04/20/10 11:57:54.367:4189) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.367:4189) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.398:4190) : item=4 name=/dev/.udev/db/block:ram10 inode=24417 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4190) : item=3 name=/dev/.udev/db/block:ram10 inode=5507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4190) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24417 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4190) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4190) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.398:4190) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.398:4190) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.398:4191) : item=4 name=/dev/.udev/db/block:ram1 inode=24416 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4191) : item=3 name=/dev/.udev/db/block:ram1 inode=24344 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4191) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24416 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4191) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4191) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.398:4191) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.398:4191) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.278:4192) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.278:4192) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.278:4192) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4775 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.398:4193) : item=1 name=/dev/.udev/db/block:ram14.tmp inode=24418 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.398:4193) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.398:4193) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.398:4193) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a128 items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.402:4194) : item=0 name=/dev/.udev/watch/81 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.402:4194) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.402:4194) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e370 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.409:4195) : item=0 name=/dev/block/1:10 inode=3932 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.409:4195) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.409:4195) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.362:4196) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:54.362:4196) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.362:4196) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.409:4197) : item=2 name=/dev/.udev/watch/81 inode=24421 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.409:4197) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.409:4197) : item=0 name=/devices/virtual/block/ram7 
>type=CWD msg=audit(04/20/10 11:57:54.409:4197) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.409:4197) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=807e370 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.409:4198) : item=0 name=/dev/.udev/watch/82 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.409:4198) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.409:4198) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f050 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.438:4199) : item=4 name=/dev/.udev/db/block:ram14 inode=24418 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4199) : item=3 name=/dev/.udev/db/block:ram14 inode=24361 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4199) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24418 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4199) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4199) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.438:4199) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.438:4199) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.438:4200) : item=2 name=/dev/.udev/watch/82 inode=24425 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4200) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4200) : item=0 name=/devices/virtual/block/ram10 
>type=CWD msg=audit(04/20/10 11:57:54.438:4200) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.438:4200) : arch=i386 syscall=symlink success=yes exit=0 a0=807f174 a1=bff1fbfc a2=8068008 a3=807f050 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.438:4201) : item=1 name=/dev/.udev/db/block:ram10.tmp inode=24426 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4201) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.438:4201) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.438:4201) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f4d0 items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.409:4202) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:54.409:4202) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.409:4202) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.438:4203) : item=4 name=/dev/.udev/db/block:ram10 inode=24426 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4203) : item=3 name=/dev/.udev/db/block:ram10 inode=24417 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4203) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24426 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4203) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4203) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.438:4203) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.438:4203) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.438:4204) : item=0 name=/dev/block/1:1 inode=3882 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.438:4204) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.438:4204) : arch=i386 syscall=readlink success=yes exit=7 a0=8080498 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.438:4205) : item=0 name=/dev/.udev/watch/83 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.438:4205) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.438:4205) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.438:4206) : item=2 name=/dev/.udev/watch/83 inode=24429 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4206) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.438:4206) : item=0 name=/devices/virtual/block/ram1 
>type=CWD msg=audit(04/20/10 11:57:54.438:4206) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.438:4206) : arch=i386 syscall=symlink success=yes exit=0 a0=807b52c a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.442:4207) : item=1 name=/dev/.udev/db/block:ram1.tmp inode=24430 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.442:4207) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.442:4207) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.442:4207) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.442:4208) : item=4 name=/dev/.udev/db/block:ram1 inode=24430 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.442:4208) : item=3 name=/dev/.udev/db/block:ram1 inode=24416 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.442:4208) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24430 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.442:4208) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.442:4208) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.442:4208) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.442:4208) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.426:4209) : item=1 name=/dev/.udev/db/block:ram7.tmp inode=24424 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.426:4209) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.426:4209) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.426:4209) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807fa30 items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.473:4210) : item=0 name=/dev/.udev/db/block:loop0 inode=24374 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.473:4210) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.473:4210) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807d348 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.374:4211) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.374:4211) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.374:4211) : arch=i386 syscall=open success=yes exit=3 a0=bfcf5f4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4774 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.454:4212) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:54.454:4212) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.454:4212) : arch=i386 syscall=open success=yes exit=3 a0=bfc44f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4776 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.473:4213) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:54.473:4213) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.473:4213) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=4c002 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.530:4214) : item=1 name=/dev/.udev/watch/71 inode=24373 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.530:4214) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.530:4214) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.530:4214) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.454:4215) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:54.454:4215) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.454:4215) : arch=i386 syscall=open success=yes exit=3 a0=bfa4ff4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4775 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4216) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:54.534:4216) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4216) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=4c002 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4217) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.534:4217) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4217) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=4c002 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4218) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:54.534:4218) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4218) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=4c002 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.502:4219) : item=2 name=/dev/.udev/db/block:ram0.tmp inode=24438 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.502:4219) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.502:4219) : item=0 name=ram0 block/1:0 
>type=CWD msg=audit(04/20/10 11:57:54.502:4219) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.502:4219) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4220) : item=4 name=/dev/.udev/db/block:ram0 inode=24438 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.534:4220) : item=3 name=/dev/.udev/db/block:ram0 inode=24288 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.534:4220) : item=2 name=/dev/.udev/db/block:ram0.tmp inode=24438 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.534:4220) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.534:4220) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.534:4220) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4220) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4221) : item=0 name=/dev/block/1:0 inode=3892 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.534:4221) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4221) : arch=i386 syscall=readlink success=yes exit=7 a0=807d5c8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4222) : item=0 name=/dev/.udev/watch/85 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.534:4222) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4222) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807d700 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4223) : item=2 name=/dev/.udev/watch/85 inode=24442 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.534:4223) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.534:4223) : item=0 name=/devices/virtual/block/ram0 
>type=CWD msg=audit(04/20/10 11:57:54.534:4223) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4223) : arch=i386 syscall=symlink success=yes exit=0 a0=807d844 a1=bff1fbfc a2=8068008 a3=807d700 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4224) : item=1 name=/dev/.udev/db/block:ram0.tmp inode=24443 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.534:4224) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.534:4224) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4224) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807eb28 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.534:4225) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:54.534:4225) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.534:4225) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.546:4226) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24445 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.546:4226) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.546:4226) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:57:54.546:4226) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.546:4226) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.562:4227) : item=0 name=/dev/.udev/db/block:ram1 inode=24430 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.562:4227) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.562:4227) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.502:4228) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.502:4228) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.502:4228) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4778 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.546:4229) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.546:4229) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.546:4229) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4780 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.538:4230) : item=0 name=/dev/.udev/db/block:ram4 inode=24355 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.538:4230) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.538:4230) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807df48 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.573:4231) : item=4 name=/dev/.udev/db/block:ram7 inode=24424 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.573:4231) : item=3 name=/dev/.udev/db/block:ram7 inode=24368 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.573:4231) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24424 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.573:4231) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.573:4231) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.573:4231) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.573:4231) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.581:4232) : item=4 name=/dev/.udev/db/block:ram2 inode=24445 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.581:4232) : item=3 name=/dev/.udev/db/block:ram2 inode=24351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.581:4232) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24445 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.581:4232) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.581:4232) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.581:4232) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.581:4232) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.562:4233) : item=4 name=/dev/.udev/db/block:ram0 inode=24443 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.562:4233) : item=3 name=/dev/.udev/db/block:ram0 inode=24438 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.562:4233) : item=2 name=/dev/.udev/db/block:ram0.tmp inode=24443 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.562:4233) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.562:4233) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.562:4233) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.562:4233) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.589:4234) : item=1 name=/dev/.udev/watch/83 inode=24429 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.589:4234) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.589:4234) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.589:4234) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.585:4235) : item=1 name=/dev/.udev/watch/69 inode=24354 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.585:4235) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.585:4235) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.585:4235) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.550:4236) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.550:4236) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.550:4236) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4779 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.613:4237) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.613:4237) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.613:4237) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.613:4238) : item=0 name=/dev/.udev/watch/86 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.613:4238) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.613:4238) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80793a0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.613:4239) : item=2 name=/dev/.udev/watch/86 inode=24450 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.613:4239) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.613:4239) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:57:54.613:4239) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.613:4239) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b4c a1=bff1fbfc a2=8068008 a3=80793a0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.613:4240) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=24451 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.613:4240) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.613:4240) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.613:4240) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.613:4241) : item=4 name=/dev/.udev/db/block:ram2 inode=24451 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.613:4241) : item=3 name=/dev/.udev/db/block:ram2 inode=24445 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.613:4241) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24451 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.613:4241) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.613:4241) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.613:4241) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.613:4241) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.585:4242) : item=0 name=/dev/.udev/db/block:ram5 inode=24363 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.585:4242) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.585:4242) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e370 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.581:4243) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:54.581:4243) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.581:4243) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.593:4244) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.593:4244) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.593:4244) : arch=i386 syscall=open success=yes exit=3 a0=bfee6f4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4780 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4245) : item=1 name=/dev/.udev/watch/70 inode=24362 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.633:4245) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.633:4245) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4245) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4246) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:54.633:4246) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4246) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=4c002 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4247) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:54.633:4247) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4247) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=4c002 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4248) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:54.633:4248) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4248) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=4c002 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4249) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:54.633:4249) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4249) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4250) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:54.633:4250) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4250) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4251) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:54.633:4251) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4251) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4252) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:54.633:4252) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4252) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4253) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:54.633:4253) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4253) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.633:4254) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:54.633:4254) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.633:4254) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=4c002 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.637:4255) : item=0 name=/dev/.udev/db/block:ram7 inode=24424 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.637:4255) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.637:4255) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807db20 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.641:4256) : item=1 name=/dev/.udev/watch/81 inode=24421 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.641:4256) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.641:4256) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.641:4256) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807d700 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.641:4257) : item=0 name=/dev/.udev/db/block:ram8 inode=24414 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.641:4257) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.641:4257) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e7c0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.649:4258) : item=0 name=/dev/.udev/db/block:ram13 inode=24388 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.649:4258) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.649:4258) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068440 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.677:4259) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.677:4259) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.677:4259) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4783 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.673:4260) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.673:4260) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.673:4260) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4744 pid=4782 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.669:4261) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:54.669:4261) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.669:4261) : arch=i386 syscall=open success=yes exit=3 a0=bf943c69 a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4778 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.593:4262) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.593:4262) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.593:4262) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4781 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.665:4263) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:54.665:4263) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.665:4263) : arch=i386 syscall=open success=yes exit=3 a0=bfe6bf3e a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4779 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.645:4264) : item=0 name=/dev/.udev/db/block:ram10 inode=24426 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.645:4264) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.645:4264) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f050 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.653:4265) : item=0 name=/dev/.udev/db/block:ram9 inode=24410 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.653:4265) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.653:4265) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807ed40 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.718:4266) : item=1 name=/dev/.udev/watch/82 inode=24425 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.718:4266) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.718:4266) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.718:4266) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.718:4267) : item=1 name=/dev/.udev/watch/75 inode=24409 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.718:4267) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.718:4267) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.718:4267) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807eba8 a3=bff1f71c items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.657:4268) : item=0 name=/dev/.udev/db/block:ram6 inode=24378 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.657:4268) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.657:4268) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.645:4269) : item=0 name=/dev/.udev/db/block:ram11 inode=24408 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.645:4269) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.645:4269) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f4d0 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.722:4270) : item=1 name=/dev/.udev/watch/72 inode=24377 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.722:4270) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.722:4270) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.722:4270) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.722:4271) : item=1 name=/dev/.udev/watch/78 inode=24407 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.722:4271) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.722:4271) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.722:4271) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.649:4272) : item=0 name=/dev/.udev/db/block:ram12 inode=24406 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.649:4272) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.649:4272) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f950 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.653:4273) : item=0 name=/dev/.udev/db/block:ram14 inode=24418 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.653:4273) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.653:4273) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80688c0 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.726:4274) : item=1 name=/dev/.udev/watch/77 inode=24405 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.726:4274) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.726:4274) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.726:4274) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.726:4275) : item=1 name=/dev/.udev/watch/79 inode=24415 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.726:4275) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.726:4275) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.726:4275) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.653:4276) : item=0 name=/dev/.udev/db/block:ram15 inode=24395 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.653:4276) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.653:4276) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068d40 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.730:4277) : item=1 name=/dev/.udev/watch/74 inode=24387 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.730:4277) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.730:4277) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.730:4277) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.730:4278) : item=1 name=/dev/.udev/watch/76 inode=24394 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.730:4278) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.730:4278) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.730:4278) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.734:4279) : item=1 name=/dev/.udev/watch/80 inode=24413 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.734:4279) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.734:4279) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.734:4279) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080b28 a3=bff1f71c items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.677:4280) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.677:4280) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.677:4280) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4745 pid=4784 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.754:4281) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:54.754:4281) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.754:4281) : arch=i386 syscall=open success=yes exit=3 a0=bff97f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4781 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.754:4282) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:54.754:4282) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.754:4282) : arch=i386 syscall=open success=yes exit=3 a0=bf93af4b a1=8000 a2=0 a3=804f008 items=1 ppid=4745 pid=4784 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.762:4283) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.762:4283) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.762:4283) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4749 pid=4786 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.766:4284) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:54.766:4284) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.766:4284) : arch=i386 syscall=open success=yes exit=3 a0=bfa42f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4744 pid=4782 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.770:4285) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:54.770:4285) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.770:4285) : arch=i386 syscall=open success=yes exit=3 a0=bfdabf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4783 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.770:4286) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.770:4286) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.770:4286) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4755 pid=4787 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.685:4287) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.685:4287) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.685:4287) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=98800 a2=b76a7ff4 a3=811fa58 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.774:4288) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.774:4288) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.774:4288) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4747 pid=4792 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.774:4289) : item=0 name=/dev/.mdadm inode=6133 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.774:4289) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.774:4289) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.774:4290) : item=0 name=/dev/.sysconfig inode=5853 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.774:4290) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.774:4290) : arch=i386 syscall=open success=yes exit=3 a0=811b340 a1=98800 a2=b76a7ff4 a3=811b340 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.774:4291) : item=0 name=/dev/.sysconfig/network inode=5854 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.774:4291) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:54.774:4291) : arch=i386 syscall=open success=yes exit=3 a0=8134db8 a1=98800 a2=b76a7ff4 a3=8134db8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.790:4292) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24472 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.790:4292) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.790:4292) : item=0 name=ram7 block/1:7 
>type=CWD msg=audit(04/20/10 11:57:54.790:4292) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.790:4292) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.822:4293) : item=4 name=/dev/.udev/db/block:ram7 inode=24472 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4293) : item=3 name=/dev/.udev/db/block:ram7 inode=24424 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4293) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24472 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4293) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4293) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.822:4293) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.822:4293) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.822:4294) : item=0 name=/dev/block/1:7 inode=3917 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.822:4294) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.822:4294) : arch=i386 syscall=readlink success=yes exit=7 a0=80805d8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.822:4295) : item=0 name=/dev/.udev/watch/88 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.822:4295) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.822:4295) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080af8 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.822:4296) : item=2 name=/dev/.udev/watch/88 inode=24475 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4296) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4296) : item=0 name=/devices/virtual/block/ram7 
>type=CWD msg=audit(04/20/10 11:57:54.822:4296) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.822:4296) : arch=i386 syscall=symlink success=yes exit=0 a0=8080bac a1=bff1fbfc a2=8068008 a3=8080af8 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.822:4297) : item=1 name=/dev/.udev/db/block:ram7.tmp inode=24476 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4297) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.822:4297) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.822:4297) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807eb28 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.822:4298) : item=4 name=/dev/.udev/db/block:ram7 inode=24476 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4298) : item=3 name=/dev/.udev/db/block:ram7 inode=24472 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4298) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24476 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4298) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.822:4298) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.822:4298) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.822:4298) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.786:4299) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.786:4299) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.786:4299) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4757 pid=4789 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.786:4300) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.786:4300) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.786:4300) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4750 pid=4785 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.798:4301) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:54.798:4301) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.798:4301) : arch=i386 syscall=open success=yes exit=3 a0=bfdbbf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4749 pid=4786 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.782:4302) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.782:4302) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.782:4302) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4790 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.790:4303) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:54.790:4303) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.790:4303) : arch=i386 syscall=open success=yes exit=3 a0=bfa0ef4b a1=8000 a2=0 a3=804f008 items=1 ppid=4747 pid=4792 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.782:4304) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24471 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.782:4304) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.782:4304) : item=0 name=ram5 block/1:5 
>type=CWD msg=audit(04/20/10 11:57:54.782:4304) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.782:4304) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.834:4305) : item=4 name=/dev/.udev/db/block:ram5 inode=24471 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.834:4305) : item=3 name=/dev/.udev/db/block:ram5 inode=24363 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.834:4305) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24471 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.834:4305) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.834:4305) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.834:4305) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.834:4305) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.778:4306) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24469 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.778:4306) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.778:4306) : item=0 name=ram4 block/1:4 
>type=CWD msg=audit(04/20/10 11:57:54.778:4306) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.778:4306) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.834:4307) : item=0 name=/dev/block/1:5 inode=3897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.834:4307) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.834:4307) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.834:4308) : item=4 name=/dev/.udev/db/block:ram4 inode=24469 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.834:4308) : item=3 name=/dev/.udev/db/block:ram4 inode=24355 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.834:4308) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24469 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.834:4308) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.834:4308) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.834:4308) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.834:4308) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.834:4309) : item=0 name=/dev/.udev/watch/89 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.834:4309) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.834:4309) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807df48 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.782:4310) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24470 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.782:4310) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.782:4310) : item=0 name=ram1 block/1:1 
>type=CWD msg=audit(04/20/10 11:57:54.782:4310) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.782:4310) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.786:4311) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.786:4311) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.786:4311) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4791 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.786:4312) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.786:4312) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.786:4312) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4756 pid=4788 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.842:4313) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24480 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.842:4313) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.842:4313) : item=0 name=ram9 block/1:9 
>type=CWD msg=audit(04/20/10 11:57:54.842:4313) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.842:4313) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4314) : item=4 name=/dev/.udev/db/block:ram9 inode=24480 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4314) : item=3 name=/dev/.udev/db/block:ram9 inode=24410 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4314) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24480 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4314) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4314) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4314) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4314) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4315) : item=0 name=/dev/block/1:9 inode=3940 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4315) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4315) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4316) : item=0 name=/dev/.udev/watch/90 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4316) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4316) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e7c0 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4317) : item=2 name=/dev/.udev/watch/90 inode=24483 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4317) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4317) : item=0 name=/devices/virtual/block/ram9 
>type=CWD msg=audit(04/20/10 11:57:54.862:4317) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4317) : arch=i386 syscall=symlink success=yes exit=0 a0=807d9dc a1=bff1fbfc a2=8068008 a3=807e7c0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4318) : item=1 name=/dev/.udev/db/block:ram9.tmp inode=24484 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4318) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4318) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4318) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ed40 items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4319) : item=4 name=/dev/.udev/db/block:ram9 inode=24484 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4319) : item=3 name=/dev/.udev/db/block:ram9 inode=24480 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4319) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24484 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4319) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4319) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4319) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4319) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4320) : item=0 name=/dev/block/1:4 inode=3922 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4320) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4320) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.842:4321) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24479 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.842:4321) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.842:4321) : item=0 name=ram8 block/1:8 
>type=CWD msg=audit(04/20/10 11:57:54.842:4321) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.842:4321) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4322) : item=4 name=/dev/.udev/db/block:ram8 inode=24479 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4322) : item=3 name=/dev/.udev/db/block:ram8 inode=24414 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4322) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24479 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4322) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4322) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4322) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4322) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4323) : item=0 name=/dev/block/1:8 inode=3952 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4323) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4323) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4324) : item=0 name=/dev/.udev/watch/91 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4324) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4324) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807db20 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4325) : item=2 name=/dev/.udev/watch/91 inode=24487 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4325) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4325) : item=0 name=/devices/virtual/block/ram4 
>type=CWD msg=audit(04/20/10 11:57:54.862:4325) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4325) : arch=i386 syscall=symlink success=yes exit=0 a0=807952c a1=bff1fbfc a2=8068008 a3=807db20 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4326) : item=1 name=/dev/.udev/db/block:ram4.tmp inode=24489 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4326) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4326) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4326) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef50 items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4327) : item=0 name=/dev/.udev/watch/92 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4327) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4327) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e370 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4328) : item=4 name=/dev/.udev/db/block:ram4 inode=24489 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4328) : item=3 name=/dev/.udev/db/block:ram4 inode=24469 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4328) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24489 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4328) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4328) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.862:4328) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4328) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.862:4329) : item=2 name=/dev/.udev/watch/92 inode=24491 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4329) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.862:4329) : item=0 name=/devices/virtual/block/ram8 
>type=CWD msg=audit(04/20/10 11:57:54.862:4329) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.862:4329) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=807e370 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.866:4330) : item=1 name=/dev/.udev/db/block:ram8.tmp inode=24492 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.866:4330) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.866:4330) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.866:4330) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f7c8 items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.882:4331) : item=1 name=/dev/.udev/db/block:loop0.tmp inode=24495 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.882:4331) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.882:4331) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.882:4331) : arch=i386 syscall=open success=yes exit=3 a0=bff1f224 a1=8241 a2=1b6 a3=807e860 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.794:4332) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:54.794:4332) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.794:4332) : arch=i386 syscall=open success=yes exit=3 a0=bf9d9f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4755 pid=4787 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.778:4333) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.778:4333) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.778:4333) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4758 pid=4793 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.921:4334) : item=4 name=/dev/.udev/db/block:ram8 inode=24492 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.921:4334) : item=3 name=/dev/.udev/db/block:ram8 inode=24479 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.921:4334) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24492 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.921:4334) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.921:4334) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.921:4334) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.921:4334) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.925:4335) : item=4 name=/dev/.udev/db/block:ram1 inode=24470 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4335) : item=3 name=/dev/.udev/db/block:ram1 inode=24430 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4335) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24470 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4335) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4335) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.925:4335) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.925:4335) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.925:4336) : item=2 name=/dev/.udev/watch/89 inode=24496 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4336) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4336) : item=0 name=/devices/virtual/block/ram5 
>type=CWD msg=audit(04/20/10 11:57:54.925:4336) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.925:4336) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807df48 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.925:4337) : item=0 name=/dev/block/1:1 inode=3882 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.925:4337) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.925:4337) : arch=i386 syscall=readlink success=yes exit=7 a0=8079880 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.925:4338) : item=1 name=/dev/.udev/db/block:ram5.tmp inode=24497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4338) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.925:4338) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.925:4338) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f378 items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.925:4339) : item=0 name=/dev/.udev/watch/93 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.925:4339) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.925:4339) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.925:4340) : item=2 name=/dev/.udev/watch/93 inode=24500 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4340) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4340) : item=0 name=/devices/virtual/block/ram1 
>type=CWD msg=audit(04/20/10 11:57:54.925:4340) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.925:4340) : arch=i386 syscall=symlink success=yes exit=0 a0=807b52c a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.925:4341) : item=4 name=/dev/.udev/db/block:ram5 inode=24497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4341) : item=3 name=/dev/.udev/db/block:ram5 inode=24471 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4341) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4341) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4341) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.925:4341) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.925:4341) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.925:4342) : item=1 name=/dev/.udev/db/block:ram1.tmp inode=24501 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.925:4342) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.925:4342) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.925:4342) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.886:4343) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.886:4343) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.886:4343) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4795 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.957:4344) : item=4 name=/dev/.udev/db/block:ram1 inode=24501 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.957:4344) : item=3 name=/dev/.udev/db/block:ram1 inode=24470 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.957:4344) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24501 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.957:4344) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.957:4344) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.957:4344) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.957:4344) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.957:4345) : item=4 name=/dev/.udev/db/block:loop0 inode=24495 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.957:4345) : item=3 name=/dev/.udev/db/block:loop0 inode=24374 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.957:4345) : item=2 name=/dev/.udev/db/block:loop0.tmp inode=24495 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.957:4345) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:54.957:4345) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:54.957:4345) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.957:4345) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.870:4346) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:54.870:4346) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.870:4346) : arch=i386 syscall=open success=yes exit=3 a0=bfa66f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4756 pid=4788 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.882:4347) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:54.882:4347) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.882:4347) : arch=i386 syscall=open success=yes exit=3 a0=bfd3af46 a1=8000 a2=0 a3=804f008 items=1 ppid=4757 pid=4789 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.850:4348) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:54.850:4348) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.850:4348) : arch=i386 syscall=open success=yes exit=3 a0=bff16f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4750 pid=4785 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:54.778:4349) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:54.778:4349) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:54.778:4349) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4759 pid=4794 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4351) : item=0 name=/dev/root inode=5780 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4351) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4351) : arch=i386 syscall=readlink success=yes exit=5 a0=8079880 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4352) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24503 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4352) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4352) : item=0 name=ram10 block/1:10 
>type=CWD msg=audit(04/20/10 11:57:55.013:4352) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4352) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4353) : item=1 name=/dev/.udev/links/root/b7:0 inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4353) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:57:55.013:4353) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4353) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=807fdac a1=bff1da7c a2=807cd68 a3=bff1da7c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4354) : item=4 name=/dev/.udev/db/block:ram10 inode=24503 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4354) : item=3 name=/dev/.udev/db/block:ram10 inode=24426 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4354) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24503 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4354) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4354) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4354) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4354) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4355) : item=0 name=/dev/block/7:0 inode=4679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4355) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4355) : arch=i386 syscall=readlink success=yes exit=8 a0=8080498 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4356) : item=0 name=/dev/block/1:10 inode=3932 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4356) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4356) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4357) : item=0 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4357) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4357) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=807cd68 a3=bff1da7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4358) : item=0 name=/dev/disk/by-uuid/32788f6d-b5ae-439c-b677-b97c31aedf46 inode=4681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4358) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4358) : arch=i386 syscall=readlink success=yes exit=11 a0=807d348 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4359) : item=1 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46/b7:0 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4359) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:57:55.013:4359) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4359) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=807fdac a1=bff1da7c a2=807cd68 a3=bff1da7c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4360) : item=0 name=/dev/.udev/watch/94 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4360) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4360) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4361) : item=2 name=/dev/.udev/watch/94 inode=24508 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4361) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.013:4361) : item=0 name=/devices/virtual/block/ram10 
>type=CWD msg=audit(04/20/10 11:57:55.013:4361) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4361) : arch=i386 syscall=symlink success=yes exit=0 a0=807eccc a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.033:4362) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:55.033:4362) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.033:4362) : arch=i386 syscall=open success=yes exit=3 a0=bfccaf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4759 pid=4794 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.025:4363) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24510 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.025:4363) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.025:4363) : item=0 name=ram13 block/1:13 
>type=CWD msg=audit(04/20/10 11:57:55.025:4363) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.025:4363) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.085:4364) : item=4 name=/dev/.udev/db/block:ram13 inode=24510 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4364) : item=3 name=/dev/.udev/db/block:ram13 inode=24388 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4364) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24510 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4364) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4364) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.085:4364) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.085:4364) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.085:4365) : item=0 name=/dev/block/1:13 inode=3939 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.085:4365) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.085:4365) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.085:4366) : item=0 name=/dev/.udev/watch/96 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.085:4366) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.085:4366) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f950 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.085:4367) : item=2 name=/dev/.udev/watch/96 inode=24513 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4367) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4367) : item=0 name=/devices/virtual/block/ram13 
>type=CWD msg=audit(04/20/10 11:57:55.085:4367) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.085:4367) : arch=i386 syscall=symlink success=yes exit=0 a0=807facc a1=bff1fbfc a2=8068008 a3=807f950 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.085:4368) : item=1 name=/dev/.udev/db/block:ram13.tmp inode=24514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4368) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.085:4368) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.085:4368) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=80697e8 items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.085:4369) : item=4 name=/dev/.udev/db/block:ram13 inode=24514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4369) : item=3 name=/dev/.udev/db/block:ram13 inode=24510 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4369) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4369) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.085:4369) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.085:4369) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.085:4369) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.089:4371) : item=4 name=/dev/.udev/db/block:ram11 inode=24502 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4371) : item=3 name=/dev/.udev/db/block:ram11 inode=24408 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4371) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24502 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4371) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4371) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.089:4371) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.089:4371) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.025:4372) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24509 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.025:4372) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.025:4372) : item=0 name=ram12 block/1:12 
>type=CWD msg=audit(04/20/10 11:57:55.025:4372) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.025:4372) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.089:4373) : item=0 name=/dev/block/1:11 inode=3907 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.089:4373) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.089:4373) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.089:4374) : item=4 name=/dev/.udev/db/block:ram12 inode=24509 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4374) : item=3 name=/dev/.udev/db/block:ram12 inode=24406 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4374) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24509 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4374) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4374) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.089:4374) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.089:4374) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.089:4375) : item=0 name=/dev/block/1:12 inode=3902 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.089:4375) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.089:4375) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.089:4376) : item=0 name=/dev/.udev/watch/97 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.089:4376) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.089:4376) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f4d0 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.117:4377) : item=2 name=/dev/.udev/watch/97 inode=24520 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4377) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4377) : item=0 name=/devices/virtual/block/ram12 
>type=CWD msg=audit(04/20/10 11:57:55.117:4377) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.117:4377) : arch=i386 syscall=symlink success=yes exit=0 a0=807f64c a1=bff1fbfc a2=8068008 a3=807f4d0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.117:4378) : item=1 name=/dev/.udev/db/block:ram12.tmp inode=24521 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4378) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.117:4378) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.117:4378) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f950 items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.117:4379) : item=4 name=/dev/.udev/db/block:ram12 inode=24521 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4379) : item=3 name=/dev/.udev/db/block:ram12 inode=24509 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4379) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24521 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4379) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4379) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.117:4379) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.117:4379) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.117:4381) : item=1 name=/dev/.udev/db/block:ram10.tmp inode=24522 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4381) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.117:4381) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.117:4381) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f050 items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.117:4382) : item=4 name=/dev/.udev/db/block:ram10 inode=24522 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4382) : item=3 name=/dev/.udev/db/block:ram10 inode=24503 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4382) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24522 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4382) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.117:4382) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.117:4382) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.117:4382) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4383) : item=0 name=/dev/.udev inode=5285 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4383) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4383) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4384) : item=0 name=/dev/.udev/db inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4384) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4384) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b76a7ff4 a3=8127e38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4385) : item=0 name=/dev/.udev/links inode=5781 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4385) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4385) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b76a7ff4 a3=8127e38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4386) : item=0 name=/dev/.udev/links/cdrom inode=6029 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4386) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4386) : arch=i386 syscall=open success=yes exit=3 a0=8134db8 a1=98800 a2=b76a7ff4 a3=8134db8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4387) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6038 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4387) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4387) : arch=i386 syscall=open success=yes exit=3 a0=812ac48 a1=98800 a2=b76a7ff4 a3=812ac48 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4388) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part1 inode=24084 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4388) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4388) : arch=i386 syscall=open success=yes exit=3 a0=812a878 a1=98800 a2=b76a7ff4 a3=812a878 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4389) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24067 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4389) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4389) : arch=i386 syscall=open success=yes exit=3 a0=812a878 a1=98800 a2=b76a7ff4 a3=812a878 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4390) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6040 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4390) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4390) : arch=i386 syscall=open success=yes exit=3 a0=812a610 a1=98800 a2=b76a7ff4 a3=812a610 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4391) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part1 inode=24087 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4391) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4391) : arch=i386 syscall=open success=yes exit=3 a0=812a610 a1=98800 a2=b76a7ff4 a3=812a610 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4392) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24070 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4392) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4392) : arch=i386 syscall=open success=yes exit=3 a0=812a720 a1=98800 a2=b76a7ff4 a3=812a720 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4393) : item=0 name=/dev/.udev/links/disk\x2fby-label\x2fCDROM inode=6027 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4393) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4393) : arch=i386 syscall=open success=yes exit=3 a0=812a528 a1=98800 a2=b76a7ff4 a3=812a528 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4394) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:01.1-scsi-1:0:0:0 inode=6025 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4394) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4394) : arch=i386 syscall=open success=yes exit=3 a0=812a8b0 a1=98800 a2=b76a7ff4 a3=812a8b0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4395) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0 inode=6042 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4395) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4395) : arch=i386 syscall=open success=yes exit=3 a0=812a8b0 a1=98800 a2=b76a7ff4 a3=812a8b0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4396) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part1 inode=24090 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4396) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4396) : arch=i386 syscall=open success=yes exit=3 a0=812a8f8 a1=98800 a2=b76a7ff4 a3=812a8f8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4397) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part2 inode=24073 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4397) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4397) : arch=i386 syscall=open success=yes exit=3 a0=812a878 a1=98800 a2=b76a7ff4 a3=812a878 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4398) : item=0 name=/dev/.udev/watch/95 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4398) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4398) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.037:4399) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.037:4399) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.037:4399) : arch=i386 syscall=open success=yes exit=4 a0=bf98ac4d a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4795 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.129:4400) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.129:4400) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.129:4400) : item=0 name=ram14 block/1:14 
>type=CWD msg=audit(04/20/10 11:57:55.129:4400) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.129:4400) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.189:4401) : item=4 name=/dev/.udev/db/block:ram14 inode=24523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4401) : item=3 name=/dev/.udev/db/block:ram14 inode=24418 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4401) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4401) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4401) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.189:4401) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.189:4401) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.189:4402) : item=0 name=/dev/block/1:14 inode=3912 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.189:4402) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.189:4402) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.189:4403) : item=0 name=/dev/.udev/watch/99 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.189:4403) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.189:4403) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068440 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.189:4404) : item=2 name=/dev/.udev/watch/99 inode=24526 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4404) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4404) : item=0 name=/devices/virtual/block/ram14 
>type=CWD msg=audit(04/20/10 11:57:55.189:4404) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.189:4404) : arch=i386 syscall=symlink success=yes exit=0 a0=80685bc a1=bff1fbfc a2=8068008 a3=8068440 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.189:4405) : item=1 name=/dev/.udev/db/block:ram14.tmp inode=24527 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4405) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.189:4405) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.189:4405) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8069c68 items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.189:4406) : item=4 name=/dev/.udev/db/block:ram14 inode=24527 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4406) : item=3 name=/dev/.udev/db/block:ram14 inode=24523 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4406) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24527 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4406) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.189:4406) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.189:4406) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.189:4406) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.089:4407) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4407) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.089:4407) : item=0 name=ram15 block/1:15 
>type=CWD msg=audit(04/20/10 11:57:55.089:4407) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.089:4407) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.193:4408) : item=4 name=/dev/.udev/db/block:ram15 inode=24519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4408) : item=3 name=/dev/.udev/db/block:ram15 inode=24395 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4408) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4408) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4408) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.193:4408) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.193:4408) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.193:4409) : item=0 name=/dev/block/1:15 inode=3927 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.193:4409) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.193:4409) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.193:4410) : item=0 name=/dev/.udev/watch/100 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.193:4410) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.193:4410) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80688c0 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.193:4411) : item=2 name=/dev/.udev/watch/100 inode=24530 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4411) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4411) : item=0 name=/devices/virtual/block/ram15 
>type=CWD msg=audit(04/20/10 11:57:55.193:4411) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.193:4411) : arch=i386 syscall=symlink success=yes exit=0 a0=8068a3c a1=bff1fbfc a2=8068008 a3=80688c0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.193:4412) : item=1 name=/dev/.udev/db/block:ram15.tmp inode=24531 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4412) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.193:4412) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.193:4412) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a0e8 items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.193:4413) : item=4 name=/dev/.udev/db/block:ram15 inode=24531 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4413) : item=3 name=/dev/.udev/db/block:ram15 inode=24519 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4413) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24531 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4413) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.193:4413) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.193:4413) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.193:4413) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.197:4414) : item=2 name=/dev/.udev/watch/95 inode=24532 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.197:4414) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.197:4414) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:57:55.197:4414) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.197:4414) : arch=i386 syscall=symlink success=yes exit=0 a0=807fdac a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.197:4415) : item=1 name=/dev/.udev/db/block:loop0.tmp inode=24533 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.197:4415) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.197:4415) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.197:4415) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e478 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.197:4416) : item=4 name=/dev/.udev/db/block:loop0 inode=24533 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.197:4416) : item=3 name=/dev/.udev/db/block:loop0 inode=24495 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.197:4416) : item=2 name=/dev/.udev/db/block:loop0.tmp inode=24533 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.197:4416) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.197:4416) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.197:4416) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.197:4416) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.089:4418) : item=0 name=/dev/.udev/watch/98 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.089:4418) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.089:4418) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f050 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.201:4419) : item=2 name=/dev/.udev/watch/98 inode=24535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.201:4419) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.201:4419) : item=0 name=/devices/virtual/block/ram11 
>type=CWD msg=audit(04/20/10 11:57:55.201:4419) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.201:4419) : arch=i386 syscall=symlink success=yes exit=0 a0=807f1cc a1=bff1fbfc a2=8068008 a3=807f050 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.201:4420) : item=1 name=/dev/.udev/db/block:ram11.tmp inode=24536 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.201:4420) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.201:4420) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.201:4420) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f4d0 items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.201:4421) : item=4 name=/dev/.udev/db/block:ram11 inode=24536 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.201:4421) : item=3 name=/dev/.udev/db/block:ram11 inode=24502 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.201:4421) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24536 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.201:4421) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.201:4421) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.201:4421) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.201:4421) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.205:4422) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.205:4422) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.205:4422) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4796 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.205:4423) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.205:4423) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.205:4423) : item=0 name=ram6 block/1:6 
>type=CWD msg=audit(04/20/10 11:57:55.205:4423) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.205:4423) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.209:4424) : item=4 name=/dev/.udev/db/block:ram6 inode=24538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.209:4424) : item=3 name=/dev/.udev/db/block:ram6 inode=24378 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.209:4424) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.209:4424) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.209:4424) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.209:4424) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.209:4424) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.125:4425) : item=0 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.125:4425) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.125:4425) : arch=i386 syscall=open success=yes exit=3 a0=812a878 a1=98800 a2=b76a7ff4 a3=812a878 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4426) : item=0 name=/dev/block/1:6 inode=3887 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4426) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4426) : arch=i386 syscall=readlink success=yes exit=7 a0=8079880 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4427) : item=0 name=/dev/.udev/watch/101 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4427) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4427) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80793a0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4428) : item=2 name=/dev/.udev/watch/101 inode=24541 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.301:4428) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.301:4428) : item=0 name=/devices/virtual/block/ram6 
>type=CWD msg=audit(04/20/10 11:57:55.301:4428) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4428) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=80793a0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4429) : item=1 name=/dev/.udev/db/block:ram6.tmp inode=24542 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.301:4429) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4429) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4429) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4430) : item=4 name=/dev/.udev/db/block:ram6 inode=24542 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.301:4430) : item=3 name=/dev/.udev/db/block:ram6 inode=24538 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.301:4430) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24542 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.301:4430) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.301:4430) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4430) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4430) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.297:4431) : item=0 name=/dev/.udev/links/dvd inode=6031 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.297:4431) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.297:4431) : arch=i386 syscall=open success=yes exit=3 a0=812a8f8 a1=98800 a2=b76a7ff4 a3=812a8f8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4432) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-0-event-kbd inode=5850 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4432) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4432) : arch=i386 syscall=open success=yes exit=3 a0=812a918 a1=98800 a2=b76a7ff4 a3=812a918 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4433) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-event-mouse inode=5867 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4433) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4433) : arch=i386 syscall=open success=yes exit=3 a0=812a528 a1=98800 a2=b76a7ff4 a3=812a528 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4434) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-mouse inode=5861 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4434) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4434) : arch=i386 syscall=open success=yes exit=3 a0=812aa10 a1=98800 a2=b76a7ff4 a3=812aa10 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4435) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-pcspkr-event-spkr inode=5948 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4435) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4435) : arch=i386 syscall=open success=yes exit=3 a0=812aa10 a1=98800 a2=b76a7ff4 a3=812aa10 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4436) : item=0 name=/dev/.udev/links/root inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4436) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4436) : arch=i386 syscall=open success=yes exit=3 a0=812a4e0 a1=98800 a2=b76a7ff4 a3=812a4e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4437) : item=0 name=/dev/.udev/links/rtc inode=6011 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4437) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4437) : arch=i386 syscall=open success=yes exit=3 a0=812abb8 a1=98800 a2=b76a7ff4 a3=812abb8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4438) : item=0 name=/dev/.udev/links/scd0 inode=6023 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4438) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4438) : arch=i386 syscall=open success=yes exit=3 a0=812a9a0 a1=98800 a2=b76a7ff4 a3=812a9a0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4439) : item=0 name=/dev/.udev/rules.d inode=5286 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4439) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4439) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b76a7ff4 a3=8127e38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.301:4440) : item=0 name=/dev/.udev/watch inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.301:4440) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.301:4440) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b76a7ff4 a3=8127e38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4441) : item=0 name=/dev/block inode=3875 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4441) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4441) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4442) : item=0 name=/dev/bsg inode=3967 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4442) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4442) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4443) : item=0 name=/dev/char inode=2837 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4443) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4443) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4444) : item=0 name=/dev/disk inode=4020 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4444) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4444) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4445) : item=0 name=/dev/disk/by-id inode=4021 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4445) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4445) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b76a7ff4 a3=8127e38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4446) : item=0 name=/dev/disk/by-label inode=4043 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4446) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4446) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b76a7ff4 a3=8127e38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4447) : item=0 name=/dev/disk/by-path inode=4028 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4447) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4447) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b76a7ff4 a3=8127e38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4448) : item=0 name=/dev/disk/by-uuid inode=4680 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4448) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4448) : arch=i386 syscall=open success=yes exit=3 a0=8127e38 a1=98800 a2=b76a7ff4 a3=8127e38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4449) : item=0 name=/dev/input inode=3125 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4449) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4449) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4450) : item=0 name=/dev/input/by-path inode=3137 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4450) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4450) : arch=i386 syscall=open success=yes exit=3 a0=811b340 a1=98800 a2=b76a7ff4 a3=811b340 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4451) : item=0 name=/dev/mapper inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4451) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4451) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4452) : item=0 name=/dev/net inode=5241 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4452) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4452) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4453) : item=0 name=/dev/pts inode=1 dev=00:0b mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4453) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4453) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.305:4454) : item=0 name=/dev/shm inode=5252 dev=00:10 mode=dir,sticky,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.305:4454) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.305:4454) : arch=i386 syscall=open success=yes exit=3 a0=8134ee8 a1=98800 a2=b76a7ff4 a3=8134ee8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.309:4455) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.309:4455) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.309:4455) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=48800 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.309:4456) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.309:4456) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.309:4456) : arch=i386 syscall=open success=yes exit=5 a0=8120638 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.309:4457) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.309:4457) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.309:4457) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.309:4458) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.309:4458) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.309:4458) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=4c002 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.309:4459) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.309:4459) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.309:4459) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=4c002 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.309:4460) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.309:4460) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.309:4460) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=48800 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.353:4461) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.353:4461) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.353:4461) : arch=i386 syscall=open success=yes exit=5 a0=8120b90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.353:4462) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.353:4462) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.353:4462) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.353:4463) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.353:4463) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.353:4463) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.353:4464) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.353:4464) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.353:4464) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.353:4465) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:55.353:4465) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.353:4465) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=48800 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.353:4466) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:55.353:4466) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.353:4466) : arch=i386 syscall=open success=yes exit=5 a0=81208b8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.353:4467) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:55.353:4467) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.353:4467) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.357:4468) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:55.357:4468) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.357:4468) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.313:4469) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.313:4469) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.313:4469) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4797 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.361:4470) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.361:4470) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.361:4470) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=48800 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.361:4471) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.361:4471) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.361:4471) : arch=i386 syscall=open success=yes exit=5 a0=8120518 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.361:4472) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.361:4472) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.361:4472) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.361:4473) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.361:4473) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.361:4473) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.369:4474) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.369:4474) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.369:4474) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.369:4475) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:55.369:4475) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.369:4475) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=48800 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.369:4476) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:55.369:4476) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.369:4476) : arch=i386 syscall=open success=yes exit=5 a0=81206d0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.369:4477) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:55.369:4477) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.369:4477) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.369:4478) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:55.369:4478) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.369:4478) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.398:4479) : item=0 name=/dev/.udev/db/block:sda inode=24203 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.398:4479) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.398:4479) : arch=i386 syscall=open success=yes exit=3 a0=bff080fc a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4796 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.398:4480) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.398:4480) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.398:4480) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4796 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.406:4481) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.406:4481) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.406:4481) : arch=i386 syscall=open success=yes exit=3 a0=bf940f4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4797 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.410:4482) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.410:4482) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.410:4482) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4798 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.513:4483) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:55.513:4483) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.513:4483) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4484) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:55.517:4484) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4484) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=48800 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4485) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:55.517:4485) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4485) : arch=i386 syscall=open success=yes exit=5 a0=8120538 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4486) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:55.517:4486) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4486) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4487) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:55.517:4487) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4487) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=4c002 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4488) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:55.517:4488) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4488) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=4c002 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4489) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:57:55.517:4489) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4489) : arch=i386 syscall=open success=yes exit=3 a0=8121dd0 a1=48800 a2=0 a3=8120ed0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4490) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:57:55.517:4490) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4490) : arch=i386 syscall=open success=yes exit=5 a0=8121dd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4491) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:55.517:4491) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4491) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=48800 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4492) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:55.517:4492) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4492) : arch=i386 syscall=open success=yes exit=5 a0=81208d8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4493) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:55.517:4493) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4493) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4494) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:55.517:4494) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4494) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=4c002 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4495) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:55.517:4495) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4495) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=4c002 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4496) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:57:55.517:4496) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4496) : arch=i386 syscall=open success=yes exit=3 a0=8121df0 a1=48800 a2=0 a3=8120f68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4497) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:57:55.517:4497) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4497) : arch=i386 syscall=open success=yes exit=5 a0=8121df0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4498) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.517:4498) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4498) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=48800 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4499) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.517:4499) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4499) : arch=i386 syscall=open success=yes exit=5 a0=8120bb0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4500) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.517:4500) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4500) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4501) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.517:4501) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4501) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=4c002 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4502) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.517:4502) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4502) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=4c002 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4503) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:57:55.517:4503) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4503) : arch=i386 syscall=open success=yes exit=3 a0=8121e10 a1=48800 a2=0 a3=8121000 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4504) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:57:55.517:4504) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4504) : arch=i386 syscall=open success=yes exit=5 a0=8121e10 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4505) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:55.517:4505) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4505) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=48800 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4506) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:55.517:4506) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4506) : arch=i386 syscall=open success=yes exit=5 a0=8120bd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4507) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:55.517:4507) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4507) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.517:4508) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:55.517:4508) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.517:4508) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=4c002 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.521:4509) : item=0 name=/dev/.udev/db/block:ram2 inode=24451 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.521:4509) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.521:4509) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4510) : item=1 name=/dev/.udev/watch/86 inode=24450 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.553:4510) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.553:4510) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4510) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.521:4511) : item=0 name=/dev/.udev/db/block:ram1 inode=24501 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.521:4511) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.521:4511) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4512) : item=1 name=/dev/.udev/watch/93 inode=24500 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.553:4512) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.553:4512) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4512) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4513) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:55.553:4513) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4513) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=4c002 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4514) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:57:55.553:4514) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4514) : arch=i386 syscall=open success=yes exit=3 a0=8121e30 a1=48800 a2=0 a3=8121098 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4515) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:57:55.553:4515) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4515) : arch=i386 syscall=open success=yes exit=5 a0=8121e30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4516) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:55.553:4516) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4516) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=48800 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4517) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:55.553:4517) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4517) : arch=i386 syscall=open success=yes exit=5 a0=8120350 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4518) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:55.553:4518) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4518) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4519) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:55.553:4519) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4519) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4520) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:55.553:4520) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4520) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4521) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:57:55.553:4521) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4521) : arch=i386 syscall=open success=yes exit=3 a0=8121e50 a1=48800 a2=0 a3=8121130 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4522) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:57:55.553:4522) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4522) : arch=i386 syscall=open success=yes exit=5 a0=8121e50 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4523) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:55.553:4523) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4523) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=48800 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4524) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:55.553:4524) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4524) : arch=i386 syscall=open success=yes exit=5 a0=8120198 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4525) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:55.553:4525) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4525) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4526) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:55.553:4526) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4526) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4527) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:55.553:4527) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4527) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4528) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:57:55.553:4528) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4528) : arch=i386 syscall=open success=yes exit=3 a0=8121e70 a1=48800 a2=0 a3=81211c8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4529) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:57:55.553:4529) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4529) : arch=i386 syscall=open success=yes exit=5 a0=8121e70 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4530) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:55.553:4530) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4530) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=48800 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4531) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:55.553:4531) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4531) : arch=i386 syscall=open success=yes exit=5 a0=8120bf0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4532) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:55.553:4532) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4532) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4533) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:55.553:4533) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4533) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=4c002 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4534) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:55.553:4534) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4534) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=4c002 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4535) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:57:55.553:4535) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4535) : arch=i386 syscall=open success=yes exit=3 a0=8121e90 a1=48800 a2=0 a3=8121260 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4536) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:57:55.553:4536) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4536) : arch=i386 syscall=open success=yes exit=5 a0=8121e90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4537) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:55.553:4537) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4537) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=48800 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4538) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:55.553:4538) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4538) : arch=i386 syscall=open success=yes exit=5 a0=81208f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4539) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:55.553:4539) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4539) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4540) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:55.553:4540) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4540) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=4c002 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.553:4541) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:55.553:4541) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.553:4541) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=4c002 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4542) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:55.557:4542) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4542) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=48800 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4543) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:55.557:4543) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4543) : arch=i386 syscall=open success=yes exit=5 a0=8120918 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4544) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:55.557:4544) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4544) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4545) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:55.557:4545) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4545) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=4c002 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4546) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:55.557:4546) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4546) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=4c002 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4547) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:55.557:4547) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4547) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=48800 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4548) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:55.557:4548) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4548) : arch=i386 syscall=open success=yes exit=5 a0=811ff88 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4549) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:55.557:4549) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4549) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4550) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:55.557:4550) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4550) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4551) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:55.557:4551) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4551) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4552) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:55.557:4552) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4552) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=48800 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4553) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:55.557:4553) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4553) : arch=i386 syscall=open success=yes exit=5 a0=811fc30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4554) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:55.557:4554) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4554) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4555) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:55.557:4555) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4555) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4556) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:55.557:4556) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4556) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4557) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:55.557:4557) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4557) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=48800 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4558) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:55.557:4558) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4558) : arch=i386 syscall=open success=yes exit=5 a0=8120098 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4559) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:55.557:4559) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4559) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.557:4560) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:55.557:4560) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.557:4560) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.521:4561) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.521:4561) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.521:4561) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4798 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.521:4562) : item=0 name=/dev/.udev/db/block:ram3 inode=24458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.521:4562) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.521:4562) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807d470 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.561:4563) : item=1 name=/dev/.udev/watch/87 inode=24457 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.561:4563) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.561:4563) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.561:4563) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.569:4564) : item=0 name=/dev/.udev/db/block:ram4 inode=24489 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.569:4564) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.569:4564) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807db20 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.569:4565) : item=1 name=/dev/.udev/watch/91 inode=24487 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.569:4565) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.569:4565) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.569:4565) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.573:4566) : item=0 name=/dev/.udev/db/block:ram5 inode=24497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.573:4566) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.573:4566) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807df48 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.573:4567) : item=0 name=/dev/.udev/db/block:ram6 inode=24542 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.573:4567) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.573:4567) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e370 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.577:4568) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:55.577:4568) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.577:4568) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4569) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:55.645:4569) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4569) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=48800 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.013:4350) : item=0 name=/dev/.udev/links/root inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.013:4350) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.013:4350) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=807cd68 a3=bff1da7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4570) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:55.645:4570) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4570) : arch=i386 syscall=open success=yes exit=5 a0=8120278 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4571) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:55.645:4571) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4571) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4572) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:55.645:4572) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4572) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4573) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:55.645:4573) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4573) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4574) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:55.645:4574) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4574) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=48800 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4575) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:55.645:4575) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4575) : arch=i386 syscall=open success=yes exit=5 a0=8120298 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4576) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:55.645:4576) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4576) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4577) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:55.645:4577) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4577) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4578) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:55.645:4578) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4578) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4579) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:55.645:4579) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4579) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=48800 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4580) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:55.645:4580) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4580) : arch=i386 syscall=open success=yes exit=5 a0=81209a8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4581) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:55.645:4581) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4581) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4582) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:55.645:4582) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4582) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=4c002 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.645:4583) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:55.645:4583) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.645:4583) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=4c002 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.573:4584) : item=0 name=/dev/.udev/db/block:ram7 inode=24476 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.573:4584) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.573:4584) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e7c0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.577:4585) : item=0 name=/dev/.udev/db/block:ram12 inode=24521 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.577:4585) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.577:4585) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068440 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.649:4586) : item=1 name=/dev/.udev/watch/88 inode=24475 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.649:4586) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.649:4586) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.649:4586) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068100 a3=bff1f71c items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.649:4587) : item=1 name=/dev/.udev/watch/97 inode=24520 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.649:4587) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.649:4587) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.649:4587) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.577:4588) : item=0 name=/dev/.udev/db/block:ram11 inode=24536 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.577:4588) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.577:4588) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f950 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.649:4589) : item=1 name=/dev/.udev/watch/98 inode=24535 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.649:4589) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.649:4589) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.649:4589) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.649:4590) : item=1 name=/dev/.udev/watch/89 inode=24496 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.649:4590) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.649:4590) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.649:4590) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.577:4591) : item=0 name=/dev/.udev/db/block:ram10 inode=24522 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.577:4591) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.577:4591) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f4d0 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.577:4592) : item=0 name=/dev/.udev/db/block:ram8 inode=24492 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.577:4592) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.577:4592) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807ed40 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.653:4593) : item=1 name=/dev/.udev/watch/94 inode=24508 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.653:4593) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.653:4593) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.653:4593) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.653:4594) : item=1 name=/dev/.udev/watch/92 inode=24491 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.653:4594) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.653:4594) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.653:4594) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807eba8 a3=bff1f71c items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.577:4595) : item=0 name=/dev/.udev/db/block:sda inode=24203 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.577:4595) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.577:4595) : arch=i386 syscall=open success=yes exit=4 a0=bfdd978c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4798 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.577:4596) : item=0 name=/dev/.udev/db/block:ram9 inode=24484 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.577:4596) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.577:4596) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f050 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.653:4597) : item=1 name=/dev/.udev/watch/101 inode=24541 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.653:4597) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.653:4597) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.653:4597) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80680f0 a3=bff1f71c items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.653:4598) : item=1 name=/dev/.udev/watch/90 inode=24483 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.653:4598) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.653:4598) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.653:4598) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.661:4599) : item=0 name=/dev/.udev/db/block:ram14 inode=24527 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.661:4599) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.661:4599) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068d40 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.661:4600) : item=1 name=/dev/.udev/watch/99 inode=24526 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.661:4600) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.661:4600) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.661:4600) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.701:4601) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.701:4601) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.701:4601) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=48800 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.665:4602) : item=0 name=/dev/.udev/db/block:ram15 inode=24531 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.665:4602) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.665:4602) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80691c0 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.685:4603) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.685:4603) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.685:4603) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4750 pid=4809 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.689:4604) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.689:4604) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.689:4604) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4810 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.581:4605) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.581:4605) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.581:4605) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4800 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.837:4606) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.837:4606) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.837:4606) : arch=i386 syscall=open success=yes exit=5 a0=8120638 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.837:4607) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.837:4607) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.837:4607) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.837:4608) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.837:4608) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.837:4608) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=4c002 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.837:4609) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:55.837:4609) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.837:4609) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=4c002 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.685:4610) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.685:4610) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.685:4610) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4745 pid=4808 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.837:4611) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.837:4611) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.837:4611) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=48800 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.837:4612) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.837:4612) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.837:4612) : arch=i386 syscall=open success=yes exit=5 a0=8120b90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.837:4613) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.837:4613) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.837:4613) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.837:4614) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.837:4614) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.837:4614) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.681:4615) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.681:4615) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.681:4615) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4749 pid=4807 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.673:4616) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.673:4616) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.673:4616) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4757 pid=4803 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.525:4617) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.525:4617) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.525:4617) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4799 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.673:4618) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.673:4618) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.673:4618) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4756 pid=4804 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.685:4619) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.685:4619) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.685:4619) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4747 pid=4802 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.581:4620) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.581:4620) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.581:4620) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4801 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.673:4621) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.673:4621) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.673:4621) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4744 pid=4805 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.685:4622) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.685:4622) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.685:4622) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4755 pid=4806 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.689:4623) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.689:4623) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.689:4623) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4811 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.861:4624) : item=1 name=/dev/.udev/watch/100 inode=24530 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.861:4624) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.861:4624) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.861:4624) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.665:4625) : item=0 name=/dev/.udev/db/block:ram13 inode=24514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.665:4625) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.665:4625) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80688c0 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.869:4626) : item=1 name=/dev/.udev/watch/96 inode=24513 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.869:4626) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.869:4626) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.869:4626) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.885:4627) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.885:4627) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.885:4627) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4759 pid=4813 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.885:4628) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:55.885:4628) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.885:4628) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.885:4629) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:55.885:4629) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.885:4629) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=48800 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.885:4630) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:55.885:4630) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.885:4630) : arch=i386 syscall=open success=yes exit=5 a0=81208b8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.885:4631) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:55.885:4631) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.885:4631) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.885:4632) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:55.885:4632) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.885:4632) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.889:4633) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.889:4633) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.889:4633) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4760 pid=4815 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.889:4634) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.889:4634) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.889:4634) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4758 pid=4814 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.893:4635) : item=0 name=/dev/.udev/db/block:ram0 inode=24554 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.893:4635) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.893:4635) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.893:4636) : item=1 name=/dev/.udev/watch/102 inode=24553 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:55.893:4636) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:55.893:4636) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.893:4636) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80778c0 a3=bff1f71c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.897:4637) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.897:4637) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.897:4637) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=48800 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.897:4638) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.897:4638) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.897:4638) : arch=i386 syscall=open success=yes exit=5 a0=8120518 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.897:4639) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.897:4639) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.897:4639) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.897:4640) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.897:4640) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.897:4640) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.901:4641) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:55.901:4641) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.901:4641) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.905:4642) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:55.905:4642) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.905:4642) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=48800 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.905:4643) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:55.905:4643) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.905:4643) : arch=i386 syscall=open success=yes exit=5 a0=81206d0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.905:4644) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:55.905:4644) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:55.905:4644) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:55.905:4708) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:55.905:4708) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:55.905:4708) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=4817 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.170:4646) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:56.170:4646) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.170:4646) : arch=i386 syscall=open success=yes exit=3 a0=bf8f9f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4750 pid=4809 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.158:4647) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:56.158:4647) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.158:4647) : arch=i386 syscall=open success=yes exit=3 a0=bfa14f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4745 pid=4808 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.167:4648) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:56.167:4648) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.167:4648) : arch=i386 syscall=open success=yes exit=3 a0=bfde8f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4810 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.142:4649) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.142:4649) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.142:4649) : arch=i386 syscall=open success=yes exit=3 a0=bfd35f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4801 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.167:4650) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:56.167:4650) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.167:4650) : arch=i386 syscall=open success=yes exit=3 a0=bf992f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4757 pid=4803 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.138:4651) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:56.138:4651) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.138:4651) : arch=i386 syscall=open success=yes exit=3 a0=bfddaf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4756 pid=4804 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.134:4652) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:56.134:4652) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.134:4652) : arch=i386 syscall=open success=yes exit=3 a0=bfafcf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4758 pid=4814 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.130:4653) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:56.130:4653) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.130:4653) : arch=i386 syscall=open success=yes exit=3 a0=bfb0cf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4755 pid=4806 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.130:4654) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:56.130:4654) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.130:4654) : arch=i386 syscall=open success=yes exit=3 a0=bff55f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4747 pid=4802 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.017:4655) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.017:4655) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.017:4655) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4816 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.126:4656) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:56.126:4656) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.126:4656) : arch=i386 syscall=open success=yes exit=3 a0=bfcfef4b a1=8000 a2=0 a3=804f008 items=1 ppid=4749 pid=4807 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.154:4657) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:56.154:4657) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.154:4657) : arch=i386 syscall=open success=yes exit=3 a0=bfbb0f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4760 pid=4815 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.202:4658) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:56.202:4658) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.202:4658) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.202:4659) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24580 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.202:4659) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.202:4659) : item=0 name=ram15 block/1:15 
>type=CWD msg=audit(04/20/10 11:57:56.202:4659) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.202:4659) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4660) : item=4 name=/dev/.udev/db/block:ram15 inode=24580 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4660) : item=3 name=/dev/.udev/db/block:ram15 inode=24531 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4660) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24580 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4660) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4660) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.206:4660) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4660) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4661) : item=0 name=/dev/block/1:15 inode=3927 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.206:4661) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4661) : arch=i386 syscall=readlink success=yes exit=8 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4662) : item=0 name=/dev/.udev/watch/104 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.206:4662) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4662) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068d40 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4663) : item=2 name=/dev/.udev/watch/104 inode=24583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4663) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4663) : item=0 name=/devices/virtual/block/ram15 
>type=CWD msg=audit(04/20/10 11:57:56.206:4663) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4663) : arch=i386 syscall=symlink success=yes exit=0 a0=8068ebc a1=bff1fbfc a2=8068008 a3=8068d40 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4664) : item=1 name=/dev/.udev/db/block:ram15.tmp inode=24584 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4664) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.206:4664) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4664) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a568 items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4665) : item=4 name=/dev/.udev/db/block:ram15 inode=24584 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4665) : item=3 name=/dev/.udev/db/block:ram15 inode=24580 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4665) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24584 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4665) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4665) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.206:4665) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4665) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4666) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4666) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4666) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:57:56.206:4666) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4666) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4667) : item=4 name=/dev/.udev/db/block:ram2 inode=24585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4667) : item=3 name=/dev/.udev/db/block:ram2 inode=24451 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4667) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4667) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4667) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.206:4667) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4667) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4668) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.206:4668) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4668) : arch=i386 syscall=readlink success=yes exit=7 a0=8080498 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4669) : item=0 name=/dev/.udev/watch/105 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.206:4669) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4669) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80793a0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.206:4670) : item=2 name=/dev/.udev/watch/105 inode=24588 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4670) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.206:4670) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:57:56.206:4670) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.206:4670) : arch=i386 syscall=symlink success=yes exit=0 a0=80804e4 a1=bff1fbfc a2=8068008 a3=80793a0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.222:4671) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24596 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4671) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4671) : item=0 name=ram13 block/1:13 
>type=CWD msg=audit(04/20/10 11:57:56.222:4671) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.222:4671) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.222:4672) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4672) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4672) : item=0 name=ram11 block/1:11 
>type=CWD msg=audit(04/20/10 11:57:56.222:4672) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.222:4672) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.218:4673) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24592 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.218:4673) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.218:4673) : item=0 name=ram3 block/1:3 
>type=CWD msg=audit(04/20/10 11:57:56.218:4673) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.218:4673) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.210:4674) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.210:4674) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.210:4674) : item=0 name=ram9 block/1:9 
>type=CWD msg=audit(04/20/10 11:57:56.210:4674) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.210:4674) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.218:4675) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.218:4675) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.218:4675) : item=0 name=ram6 block/1:6 
>type=CWD msg=audit(04/20/10 11:57:56.218:4675) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.218:4675) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.230:4677) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:56.230:4677) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.230:4677) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.162:4676) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:56.162:4676) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.162:4676) : arch=i386 syscall=open success=yes exit=3 a0=bfdd4f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4811 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.222:4678) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24594 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4678) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4678) : item=0 name=ram8 block/1:8 
>type=CWD msg=audit(04/20/10 11:57:56.222:4678) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.222:4678) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.218:4679) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.218:4679) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.218:4679) : item=0 name=ram5 block/1:5 
>type=CWD msg=audit(04/20/10 11:57:56.218:4679) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.218:4679) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.222:4680) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4680) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4680) : item=0 name=ram7 block/1:7 
>type=CWD msg=audit(04/20/10 11:57:56.222:4680) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.222:4680) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.266:4681) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:56.266:4681) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.266:4681) : arch=i386 syscall=open success=yes exit=3 a0=bfd64f1b a1=8800 a2=0 a3=bfd64f1b items=1 ppid=1510 pid=4816 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.158:4682) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:56.158:4682) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.158:4682) : arch=i386 syscall=open success=yes exit=3 a0=bff3ef4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4800 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.337:4683) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=24599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.337:4683) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.337:4683) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.337:4683) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.341:4684) : item=4 name=/dev/.udev/db/block:ram2 inode=24599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4684) : item=3 name=/dev/.udev/db/block:ram2 inode=24585 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4684) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4684) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4684) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.341:4684) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.341:4684) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.218:4685) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24590 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.218:4685) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.218:4685) : item=0 name=ram12 block/1:12 
>type=CWD msg=audit(04/20/10 11:57:56.218:4685) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.218:4685) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.341:4686) : item=4 name=/dev/.udev/db/block:ram12 inode=24590 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4686) : item=3 name=/dev/.udev/db/block:ram12 inode=24521 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4686) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24590 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4686) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4686) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.341:4686) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.341:4686) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.341:4687) : item=4 name=/dev/.udev/db/block:ram11 inode=24597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4687) : item=3 name=/dev/.udev/db/block:ram11 inode=24536 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4687) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4687) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.341:4687) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.341:4687) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.341:4687) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.341:4688) : item=0 name=/dev/block/1:12 inode=3902 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.341:4688) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.341:4688) : arch=i386 syscall=readlink success=yes exit=8 a0=8080498 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.870:4922) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.870:4922) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.870:4922) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4823 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.222:4689) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24598 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4689) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.222:4689) : item=0 name=ram10 block/1:10 
>type=CWD msg=audit(04/20/10 11:57:56.222:4689) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.222:4689) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.373:4690) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.373:4690) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.373:4690) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4818 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.353:4691) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:56.353:4691) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.353:4691) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=48800 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.957:4924) : item=0 name=/dev inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.957:4924) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.957:4924) : arch=i386 syscall=open success=yes exit=3 a0=811fa60 a1=98800 a2=b76a7ff4 a3=811fa58 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4692) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:56.393:4692) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4692) : arch=i386 syscall=open success=yes exit=5 a0=8120538 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4693) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:56.393:4693) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4693) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.897:4926) : item=0 name=/dev/.udev/db/block:ram12 inode=24630 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.897:4926) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.897:4926) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807df48 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.997:4934) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:56.997:4934) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.997:4934) : arch=i386 syscall=open success=yes exit=3 a0=bfd65f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4749 pid=4831 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4694) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:56.393:4694) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4694) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=4c002 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.162:4645) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:56.162:4645) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.162:4645) : arch=i386 syscall=open success=yes exit=3 a0=bfc2af4b a1=8000 a2=0 a3=804f008 items=1 ppid=4744 pid=4805 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4695) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:56.393:4695) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4695) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=4c002 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4696) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:57:56.393:4696) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4696) : arch=i386 syscall=open success=yes exit=3 a0=8121dd0 a1=48800 a2=0 a3=8120ed0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4697) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:57:56.393:4697) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4697) : arch=i386 syscall=open success=yes exit=5 a0=8121dd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4698) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:56.393:4698) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4698) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=48800 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4699) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:56.393:4699) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4699) : arch=i386 syscall=open success=yes exit=5 a0=81208d8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4700) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:56.393:4700) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4700) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4701) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:56.393:4701) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4701) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=4c002 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.357:4702) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24600 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.357:4702) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.357:4702) : item=0 name=ram4 block/1:4 
>type=CWD msg=audit(04/20/10 11:57:56.357:4702) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.357:4702) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4703) : item=4 name=/dev/.udev/db/block:ram4 inode=24600 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.393:4703) : item=3 name=/dev/.udev/db/block:ram4 inode=24489 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.393:4703) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24600 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.393:4703) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.393:4703) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.393:4703) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4703) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4704) : item=0 name=/dev/block/1:4 inode=3922 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.393:4704) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4704) : arch=i386 syscall=readlink success=yes exit=7 a0=8079ad0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4705) : item=0 name=/dev/.udev/watch/106 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.393:4705) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4705) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807d700 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4706) : item=2 name=/dev/.udev/watch/106 inode=24605 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.393:4706) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.393:4706) : item=0 name=/devices/virtual/block/ram4 
>type=CWD msg=audit(04/20/10 11:57:56.393:4706) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4706) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=807d700 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.393:4707) : item=1 name=/dev/.udev/db/block:ram4.tmp inode=24606 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.393:4707) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.393:4707) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.393:4707) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807eb28 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.170:4709) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:56.170:4709) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.170:4709) : arch=i386 syscall=open success=yes exit=3 a0=bfe85f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4759 pid=4813 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.401:4710) : item=0 name=/dev/.udev/db/block:ram2 inode=24599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.401:4710) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.401:4710) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.321:4711) : item=4 name=/dev/.udev/db/block:ram13 inode=24596 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.321:4711) : item=3 name=/dev/.udev/db/block:ram13 inode=24514 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.321:4711) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24596 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.321:4711) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.321:4711) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.321:4711) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.321:4711) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4712) : item=4 name=/dev/.udev/db/block:ram8 inode=24594 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4712) : item=3 name=/dev/.udev/db/block:ram8 inode=24492 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4712) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24594 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4712) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4712) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.417:4712) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4712) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4713) : item=0 name=/dev/block/1:8 inode=3952 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.417:4713) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4713) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4714) : item=0 name=/dev/block/1:13 inode=3939 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.417:4714) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4714) : arch=i386 syscall=readlink success=yes exit=8 a0=807c850 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4715) : item=0 name=/dev/.udev/watch/107 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.417:4715) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4715) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e7c0 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4716) : item=2 name=/dev/.udev/watch/107 inode=24611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4716) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4716) : item=0 name=/devices/virtual/block/ram8 
>type=CWD msg=audit(04/20/10 11:57:56.417:4716) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4716) : arch=i386 syscall=symlink success=yes exit=0 a0=807d9dc a1=bff1fbfc a2=8068008 a3=807e7c0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4717) : item=1 name=/dev/.udev/db/block:ram8.tmp inode=24613 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4717) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.417:4717) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4717) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ed40 items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4718) : item=0 name=/dev/.udev/watch/108 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.417:4718) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4718) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068440 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4719) : item=2 name=/dev/.udev/watch/108 inode=24614 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4719) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4719) : item=0 name=/devices/virtual/block/ram13 
>type=CWD msg=audit(04/20/10 11:57:56.417:4719) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4719) : arch=i386 syscall=symlink success=yes exit=0 a0=8068564 a1=bff1fbfc a2=8068008 a3=8068440 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.401:4720) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:56.401:4720) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.401:4720) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=4c002 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4721) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:57:56.433:4721) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4721) : arch=i386 syscall=open success=yes exit=3 a0=8121df0 a1=48800 a2=0 a3=8120f68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4722) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:57:56.433:4722) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4722) : arch=i386 syscall=open success=yes exit=5 a0=8121df0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4723) : item=4 name=/dev/.udev/db/block:ram4 inode=24606 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.433:4723) : item=3 name=/dev/.udev/db/block:ram4 inode=24600 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.433:4723) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24606 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.433:4723) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.433:4723) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.433:4723) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4723) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4724) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.433:4724) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4724) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=48800 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4725) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.433:4725) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4725) : arch=i386 syscall=open success=yes exit=5 a0=8120bb0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4726) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.433:4726) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4726) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4727) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.433:4727) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4727) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=4c002 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4728) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.433:4728) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4728) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=4c002 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.450:4730) : item=1 name=/dev/.udev/db/block:ram13.tmp inode=24615 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4730) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.450:4730) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.450:4730) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8069c68 items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.450:4729) : item=4 name=/dev/.udev/db/block:ram10 inode=24598 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4729) : item=3 name=/dev/.udev/db/block:ram10 inode=24522 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4729) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24598 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4729) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4729) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.450:4729) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.450:4729) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.450:4731) : item=0 name=/dev/block/1:10 inode=3932 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.450:4731) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.450:4731) : arch=i386 syscall=readlink success=yes exit=8 a0=807c850 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.450:4732) : item=4 name=/dev/.udev/db/block:ram13 inode=24615 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4732) : item=3 name=/dev/.udev/db/block:ram13 inode=24596 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4732) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24615 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4732) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4732) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.450:4732) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.450:4732) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.450:4733) : item=0 name=/dev/.udev/watch/109 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.450:4733) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.450:4733) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f050 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.450:4734) : item=2 name=/dev/.udev/watch/109 inode=24618 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4734) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4734) : item=0 name=/devices/virtual/block/ram10 
>type=CWD msg=audit(04/20/10 11:57:56.450:4734) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.450:4734) : arch=i386 syscall=symlink success=yes exit=0 a0=807f174 a1=bff1fbfc a2=8068008 a3=807f050 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.450:4735) : item=1 name=/dev/.udev/watch/105 inode=24588 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4735) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.450:4735) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.450:4735) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.450:4736) : item=1 name=/dev/.udev/db/block:ram10.tmp inode=24619 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.450:4736) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.450:4736) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.450:4736) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f4d0 items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.454:4737) : item=4 name=/dev/.udev/db/block:ram7 inode=24595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.454:4737) : item=3 name=/dev/.udev/db/block:ram7 inode=24476 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.454:4737) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.454:4737) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.454:4737) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.454:4737) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.454:4737) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.454:4738) : item=0 name=/dev/block/1:7 inode=3917 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.454:4738) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.454:4738) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.401:4739) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.401:4739) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.401:4739) : item=0 name=ram1 block/1:1 
>type=CWD msg=audit(04/20/10 11:57:56.401:4739) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.401:4739) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.537:4740) : item=4 name=/dev/.udev/db/block:ram1 inode=24607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4740) : item=3 name=/dev/.udev/db/block:ram1 inode=24501 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4740) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4740) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4740) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.537:4740) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.537:4740) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.537:4741) : item=0 name=/dev/block/1:1 inode=3882 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.537:4741) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.537:4741) : arch=i386 syscall=readlink success=yes exit=7 a0=80807b0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.138:4742) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:56.138:4742) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.138:4742) : arch=i386 syscall=open success=yes exit=3 a0=bf9d9f3e a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4799 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.537:4743) : item=0 name=/dev/.udev/watch/110 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.537:4743) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.537:4743) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.537:4744) : item=2 name=/dev/.udev/watch/110 inode=24624 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4744) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4744) : item=0 name=/devices/virtual/block/ram1 
>type=CWD msg=audit(04/20/10 11:57:56.537:4744) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.537:4744) : arch=i386 syscall=symlink success=yes exit=0 a0=807b52c a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.537:4745) : item=1 name=/dev/.udev/db/block:ram1.tmp inode=24625 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4745) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.537:4745) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.537:4745) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.537:4746) : item=4 name=/dev/.udev/db/block:ram1 inode=24625 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4746) : item=3 name=/dev/.udev/db/block:ram1 inode=24607 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4746) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24625 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4746) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.537:4746) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.537:4746) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.537:4746) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.545:4747) : item=0 name=/dev/.udev/watch/111 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.545:4747) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.545:4747) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f950 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.577:4748) : item=2 name=/dev/.udev/watch/111 inode=24629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.577:4748) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.577:4748) : item=0 name=/devices/virtual/block/ram12 
>type=CWD msg=audit(04/20/10 11:57:56.577:4748) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.577:4748) : arch=i386 syscall=symlink success=yes exit=0 a0=807fa74 a1=bff1fbfc a2=8068008 a3=807f950 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.553:4749) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.553:4749) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.553:4749) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4820 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.577:4750) : item=1 name=/dev/.udev/db/block:ram12.tmp inode=24630 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.577:4750) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.577:4750) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.577:4750) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=80697e8 items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.577:4751) : item=4 name=/dev/.udev/db/block:ram12 inode=24630 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.577:4751) : item=3 name=/dev/.udev/db/block:ram12 inode=24590 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.577:4751) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24630 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.577:4751) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.577:4751) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.577:4751) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.577:4751) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.462:4752) : item=4 name=/dev/.udev/db/block:ram10 inode=24619 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.462:4752) : item=3 name=/dev/.udev/db/block:ram10 inode=24598 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.462:4752) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24619 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.462:4752) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.462:4752) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.462:4752) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.462:4752) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.502:4753) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:56.502:4753) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.502:4753) : arch=i386 syscall=open success=yes exit=3 a0=bf89f34c a1=8800 a2=0 a3=bf89f704 items=1 ppid=1510 pid=4818 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.545:4754) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24626 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.545:4754) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.545:4754) : item=0 name=ram14 block/1:14 
>type=CWD msg=audit(04/20/10 11:57:56.545:4754) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.545:4754) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4755) : item=4 name=/dev/.udev/db/block:ram14 inode=24626 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4755) : item=3 name=/dev/.udev/db/block:ram14 inode=24527 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4755) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24626 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4755) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4755) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.581:4755) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4755) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4756) : item=0 name=/dev/block/1:14 inode=3912 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.581:4756) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4756) : arch=i386 syscall=readlink success=yes exit=8 a0=807c850 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4757) : item=0 name=/dev/.udev/watch/112 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.581:4757) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4757) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80688c0 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4758) : item=2 name=/dev/.udev/watch/112 inode=24633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4758) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4758) : item=0 name=/devices/virtual/block/ram14 
>type=CWD msg=audit(04/20/10 11:57:56.581:4758) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4758) : arch=i386 syscall=symlink success=yes exit=0 a0=80689e4 a1=bff1fbfc a2=8068008 a3=80688c0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4759) : item=1 name=/dev/.udev/db/block:ram14.tmp inode=24634 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4759) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.581:4759) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4759) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a0e8 items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4760) : item=4 name=/dev/.udev/db/block:ram14 inode=24634 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4760) : item=3 name=/dev/.udev/db/block:ram14 inode=24626 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4760) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24634 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4760) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4760) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.581:4760) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4760) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4761) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:57:56.581:4761) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4761) : arch=i386 syscall=open success=yes exit=3 a0=8121e10 a1=48800 a2=0 a3=8121000 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4762) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:57:56.581:4762) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4762) : arch=i386 syscall=open success=yes exit=5 a0=8121e10 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4763) : item=4 name=/dev/.udev/db/block:ram6 inode=24593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4763) : item=3 name=/dev/.udev/db/block:ram6 inode=24542 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4763) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4763) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.581:4763) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.581:4763) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4763) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.417:4764) : item=4 name=/dev/.udev/db/block:ram8 inode=24613 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4764) : item=3 name=/dev/.udev/db/block:ram8 inode=24594 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4764) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24613 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4764) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.417:4764) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.417:4764) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.417:4764) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.621:4765) : item=0 name=/dev/block/1:6 inode=3887 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.621:4765) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.621:4765) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.621:4766) : item=0 name=/dev/.udev/watch/114 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.621:4766) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.621:4766) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807df48 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.621:4767) : item=2 name=/dev/.udev/watch/114 inode=24642 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.621:4767) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.621:4767) : item=0 name=/devices/virtual/block/ram6 
>type=CWD msg=audit(04/20/10 11:57:56.621:4767) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.621:4767) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807df48 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.621:4768) : item=1 name=/dev/.udev/db/block:ram6.tmp inode=24643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.621:4768) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.621:4768) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.621:4768) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f378 items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.621:4769) : item=4 name=/dev/.udev/db/block:ram6 inode=24643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.621:4769) : item=3 name=/dev/.udev/db/block:ram6 inode=24593 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.621:4769) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.621:4769) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.621:4769) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.621:4769) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.621:4769) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.593:4770) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:56.593:4770) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.593:4770) : arch=i386 syscall=open success=yes exit=3 a0=bf89f34c a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4818 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.581:4771) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:56.581:4771) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.581:4771) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=48800 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.625:4772) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:56.625:4772) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.625:4772) : arch=i386 syscall=open success=yes exit=5 a0=8120bd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.625:4773) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:56.625:4773) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.625:4773) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.625:4774) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:56.625:4774) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.625:4774) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=4c002 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.693:4775) : item=4 name=/dev/.udev/db/block:ram3 inode=24592 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.693:4775) : item=3 name=/dev/.udev/db/block:ram3 inode=24458 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.693:4775) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24592 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.693:4775) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.693:4775) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.693:4775) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.693:4775) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.693:4776) : item=0 name=/dev/block/1:3 inode=3947 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.693:4776) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.693:4776) : arch=i386 syscall=readlink success=yes exit=7 a0=8080000 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4777) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:56.697:4777) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4777) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=4c002 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4778) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:57:56.697:4778) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4778) : arch=i386 syscall=open success=yes exit=3 a0=8121e30 a1=48800 a2=0 a3=8121098 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4779) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:57:56.697:4779) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4779) : arch=i386 syscall=open success=yes exit=5 a0=8121e30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4780) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:56.697:4780) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4780) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=48800 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4781) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:56.697:4781) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4781) : arch=i386 syscall=open success=yes exit=5 a0=8120350 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4782) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:56.697:4782) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4782) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4783) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:56.697:4783) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4783) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4784) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:56.697:4784) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4784) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4785) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:57:56.697:4785) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4785) : arch=i386 syscall=open success=yes exit=3 a0=8121e50 a1=48800 a2=0 a3=8121130 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4786) : item=0 name=/dev/.udev/watch/115 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.697:4786) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4786) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4787) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:57:56.697:4787) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4787) : arch=i386 syscall=open success=yes exit=5 a0=8121e50 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4788) : item=2 name=/dev/.udev/watch/115 inode=24648 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.697:4788) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.697:4788) : item=0 name=/devices/virtual/block/ram3 
>type=CWD msg=audit(04/20/10 11:57:56.697:4788) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4788) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4789) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:56.697:4789) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4789) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=48800 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4790) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:56.697:4790) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4790) : arch=i386 syscall=open success=yes exit=5 a0=8120198 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4791) : item=1 name=/dev/.udev/db/block:ram3.tmp inode=24649 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.697:4791) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.697:4791) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4791) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e680 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4792) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:56.697:4792) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4792) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4793) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:56.697:4793) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4793) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4794) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:56.697:4794) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4794) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4795) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:57:56.697:4795) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4795) : arch=i386 syscall=open success=yes exit=3 a0=8121e70 a1=48800 a2=0 a3=81211c8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.462:4796) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.462:4796) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.462:4796) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4819 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.709:4797) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.709:4797) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.709:4797) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4822 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4798) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:57:56.697:4798) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4798) : arch=i386 syscall=open success=yes exit=5 a0=8121e70 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4799) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:56.761:4799) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4799) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=48800 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4800) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:56.761:4800) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4800) : arch=i386 syscall=open success=yes exit=5 a0=8120bf0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4801) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:56.761:4801) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4801) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4802) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:56.761:4802) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4802) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=4c002 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4803) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:56.761:4803) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4803) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=4c002 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4804) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:57:56.761:4804) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4804) : arch=i386 syscall=open success=yes exit=3 a0=8121e90 a1=48800 a2=0 a3=8121260 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4805) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:57:56.761:4805) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4805) : arch=i386 syscall=open success=yes exit=5 a0=8121e90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4806) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:56.761:4806) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4806) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=48800 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.433:4807) : item=0 name=/dev/block/1:11 inode=3907 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.433:4807) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.433:4807) : arch=i386 syscall=readlink success=yes exit=8 a0=807fdd0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4808) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:56.761:4808) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4808) : arch=i386 syscall=open success=yes exit=5 a0=81208f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4809) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:56.761:4809) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4809) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4810) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:56.761:4810) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4810) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=4c002 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4811) : item=0 name=/dev/.udev/watch/116 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.761:4811) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4811) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f4d0 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4813) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:56.761:4813) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4813) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=4c002 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4812) : item=2 name=/dev/.udev/watch/116 inode=24653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.761:4812) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.761:4812) : item=0 name=/devices/virtual/block/ram11 
>type=CWD msg=audit(04/20/10 11:57:56.761:4812) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4812) : arch=i386 syscall=symlink success=yes exit=0 a0=807f5f4 a1=bff1fbfc a2=8068008 a3=807f4d0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4814) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:56.761:4814) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4814) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=48800 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4815) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:56.761:4815) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4815) : arch=i386 syscall=open success=yes exit=5 a0=8120918 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4816) : item=1 name=/dev/.udev/db/block:ram11.tmp inode=24654 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.761:4816) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.761:4816) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4816) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f950 items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4817) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:56.761:4817) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4817) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.685:4818) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.685:4818) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.685:4818) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4821 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4819) : item=4 name=/dev/.udev/db/block:ram11 inode=24654 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.761:4819) : item=3 name=/dev/.udev/db/block:ram11 inode=24597 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.761:4819) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24654 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.761:4819) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.761:4819) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.761:4819) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4819) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.697:4820) : item=4 name=/dev/.udev/db/block:ram3 inode=24649 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.697:4820) : item=3 name=/dev/.udev/db/block:ram3 inode=24592 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.697:4820) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24649 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.697:4820) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.697:4820) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.697:4820) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.697:4820) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.790:4821) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:56.790:4821) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.790:4821) : arch=i386 syscall=open success=yes exit=3 a0=bfe08f4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4822 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.701:4822) : item=0 name=/dev/.udev/db/block:ram6 inode=24643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.701:4822) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.701:4822) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807db20 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.761:4823) : item=0 name=/dev/.udev/db/block:ram8 inode=24613 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.761:4823) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.761:4823) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e370 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.817:4824) : item=4 name=/dev/.udev/db/block:ram9 inode=24589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.817:4824) : item=3 name=/dev/.udev/db/block:ram9 inode=24484 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.817:4824) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.817:4824) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.817:4824) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.817:4824) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.817:4824) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.798:4825) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:56.798:4825) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.798:4825) : arch=i386 syscall=open success=yes exit=3 a0=bf992f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4819 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.834:4826) : item=0 name=/dev/block/1:9 inode=3940 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.834:4826) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.834:4826) : arch=i386 syscall=readlink success=yes exit=7 a0=8080498 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4827) : item=0 name=/dev/.udev/watch/119 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.858:4827) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4827) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4828) : item=2 name=/dev/.udev/watch/119 inode=24664 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4828) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4828) : item=0 name=/devices/virtual/block/ram9 
>type=CWD msg=audit(04/20/10 11:57:56.858:4828) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4828) : arch=i386 syscall=symlink success=yes exit=0 a0=8080a6c a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4829) : item=1 name=/dev/.udev/db/block:ram9.tmp inode=24665 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4829) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.858:4829) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4829) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f050 items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4830) : item=4 name=/dev/.udev/db/block:ram9 inode=24665 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4830) : item=3 name=/dev/.udev/db/block:ram9 inode=24589 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4830) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24665 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4830) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4830) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.858:4830) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4830) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.817:4831) : item=4 name=/dev/.udev/db/block:ram5 inode=24591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.817:4831) : item=3 name=/dev/.udev/db/block:ram5 inode=24497 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.817:4831) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.817:4831) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.817:4831) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.817:4831) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.817:4831) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4832) : item=0 name=/dev/block/1:5 inode=3897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.858:4832) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4832) : arch=i386 syscall=readlink success=yes exit=7 a0=80805d8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4833) : item=0 name=/dev/.udev/watch/120 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.858:4833) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4833) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807db20 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4834) : item=2 name=/dev/.udev/watch/120 inode=24668 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4834) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4834) : item=0 name=/devices/virtual/block/ram5 
>type=CWD msg=audit(04/20/10 11:57:56.858:4834) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4834) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=807db20 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4835) : item=1 name=/dev/.udev/db/block:ram5.tmp inode=24669 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4835) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.858:4835) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4835) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef50 items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.858:4836) : item=4 name=/dev/.udev/db/block:ram5 inode=24669 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4836) : item=3 name=/dev/.udev/db/block:ram5 inode=24591 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4836) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24669 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4836) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.858:4836) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.858:4836) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.858:4836) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.822:4837) : item=1 name=/dev/.udev/watch/114 inode=24642 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.822:4837) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.822:4837) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.822:4837) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807d700 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.822:4838) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:56.822:4838) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.822:4838) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=4c002 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.862:4839) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:56.862:4839) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.862:4839) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=4c002 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.862:4840) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:56.862:4840) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.862:4840) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=48800 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.862:4841) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:56.862:4841) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.862:4841) : arch=i386 syscall=open success=yes exit=5 a0=811ff88 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.862:4842) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:56.862:4842) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.862:4842) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.862:4843) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:56.862:4843) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.862:4843) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.862:4844) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:56.862:4844) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.862:4844) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.817:4845) : item=0 name=/dev/.udev/watch/117 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.817:4845) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.817:4845) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080b28 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.866:4846) : item=0 name=/dev/.udev/db/block:ram10 inode=24619 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.866:4846) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.866:4846) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.866:4847) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24672 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.866:4847) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.866:4847) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:57:56.866:4847) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.866:4847) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.822:4848) : item=1 name=/dev/.udev/watch/107 inode=24611 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.822:4848) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.822:4848) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.822:4848) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80680e0 a3=bff1f71c items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4849) : item=2 name=/dev/.udev/watch/117 inode=24675 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.893:4849) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.893:4849) : item=0 name=/devices/virtual/block/ram7 
>type=CWD msg=audit(04/20/10 11:57:56.893:4849) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4849) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=8080b28 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4850) : item=1 name=/dev/.udev/db/block:ram7.tmp inode=24676 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.893:4850) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.893:4850) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4850) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f7c8 items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4851) : item=4 name=/dev/.udev/db/block:ram7 inode=24676 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.893:4851) : item=3 name=/dev/.udev/db/block:ram7 inode=24595 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.893:4851) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24676 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.893:4851) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.893:4851) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.893:4851) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4851) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4852) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:56.893:4852) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4852) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=48800 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4853) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:56.893:4853) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4853) : arch=i386 syscall=open success=yes exit=5 a0=811fc30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4854) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:56.893:4854) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4854) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4855) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:56.893:4855) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4855) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4856) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:56.893:4856) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4856) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4857) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:56.893:4857) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4857) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=48800 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4858) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:56.893:4858) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4858) : arch=i386 syscall=open success=yes exit=5 a0=8120098 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4859) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:56.893:4859) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4859) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4860) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:56.893:4860) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4860) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4861) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:56.893:4861) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4861) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4862) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:56.893:4862) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4862) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=48800 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4863) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:56.893:4863) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4863) : arch=i386 syscall=open success=yes exit=5 a0=8120278 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4864) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:56.893:4864) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4864) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4865) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:56.893:4865) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4865) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4866) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:56.893:4866) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4866) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4867) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:56.893:4867) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4867) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=48800 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4868) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:56.893:4868) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4868) : arch=i386 syscall=open success=yes exit=5 a0=8120298 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4869) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:56.893:4869) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4869) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4870) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:56.893:4870) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4870) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4871) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:56.893:4871) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4871) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4872) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:56.893:4872) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4872) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=48800 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4873) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:56.893:4873) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4873) : arch=i386 syscall=open success=yes exit=5 a0=81209a8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4874) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:56.893:4874) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4874) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4875) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:56.893:4875) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4875) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=4c002 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.893:4876) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:56.893:4876) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.893:4876) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=4c002 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.830:4877) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:56.830:4877) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.830:4877) : arch=i386 syscall=open success=yes exit=3 a0=bffcbf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=4817 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.897:4878) : item=0 name=/dev/.udev/db/block:ram11 inode=24654 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.897:4878) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.897:4878) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807d400 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.881:4879) : item=1 name=/dev/.udev/watch/109 inode=24618 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.881:4879) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.881:4879) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.881:4879) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.913:4880) : item=4 name=/dev/.udev/db/block:ram2 inode=24672 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.913:4880) : item=3 name=/dev/.udev/db/block:ram2 inode=24599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.913:4880) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24672 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.913:4880) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.913:4880) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.913:4880) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.913:4880) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.913:4881) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.913:4881) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.913:4881) : arch=i386 syscall=readlink success=yes exit=7 a0=80807b0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.913:4882) : item=0 name=/dev/.udev/watch/121 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.913:4882) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.913:4882) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80793a0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.917:4883) : item=2 name=/dev/.udev/watch/121 inode=24680 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.917:4883) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.917:4883) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:57:56.917:4883) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.917:4883) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=80793a0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.917:4885) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=24681 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.917:4885) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.917:4885) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.917:4885) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.917:4884) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.917:4884) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.917:4884) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4826 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.917:4886) : item=4 name=/dev/.udev/db/block:ram2 inode=24681 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.917:4886) : item=3 name=/dev/.udev/db/block:ram2 inode=24672 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.917:4886) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24681 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.917:4886) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.917:4886) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.917:4886) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.917:4886) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.917:4887) : item=0 name=/dev/.udev/db/block:ram2 inode=24681 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.917:4887) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.917:4887) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.921:4888) : item=0 name=/dev/.udev/watch/121 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.921:4888) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.921:4888) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1f71c a1=0 a2=80793a0 a3=bff1f71c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.921:4889) : item=1 name=/dev/.udev/watch/116 inode=24653 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.921:4889) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.921:4889) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.921:4889) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807d348 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.925:4890) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:56.925:4890) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.925:4890) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=20 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.925:4891) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:56.925:4891) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:56.925:4891) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.901:4892) : item=0 name=/dev/.udev/db/block:ram15 inode=24584 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.901:4892) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.901:4892) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f050 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.925:4893) : item=1 name=/dev/.udev/watch/104 inode=24583 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.925:4893) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.925:4893) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.925:4893) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.925:4894) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.925:4894) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.925:4894) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4745 pid=4827 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.897:4895) : item=0 name=/dev/.udev/db/block:ram14 inode=24634 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.897:4895) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.897:4895) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807ed40 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.929:4896) : item=1 name=/dev/.udev/watch/112 inode=24633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.929:4896) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.929:4896) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.929:4896) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807e7c0 a3=bff1f71c items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.901:4897) : item=0 name=/dev/.udev/db/block:ram13 inode=24615 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.901:4897) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.901:4897) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e7c0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.901:4898) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.901:4898) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.901:4898) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4825 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.937:4899) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.937:4899) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.937:4899) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4749 pid=4831 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.937:4900) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.937:4900) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.937:4900) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4750 pid=4830 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.941:4901) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:56.941:4901) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.941:4901) : arch=i386 syscall=open success=yes exit=3 a0=bfe6ef4b a1=8000 a2=0 a3=804f008 items=1 ppid=4745 pid=4827 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.937:4902) : item=2 name=/dev/.udev/db/block:ram0.tmp inode=24689 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.937:4902) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.937:4902) : item=0 name=ram0 block/1:0 
>type=CWD msg=audit(04/20/10 11:57:56.937:4902) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.937:4902) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.870:4903) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.870:4903) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.870:4903) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4824 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.933:4904) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.933:4904) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.933:4904) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4828 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.941:4905) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:56.941:4905) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.941:4905) : arch=i386 syscall=open success=yes exit=3 a0=bfebbf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4826 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.933:4906) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:56.933:4906) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.933:4906) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4829 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.989:4907) : item=4 name=/dev/.udev/db/block:ram0 inode=24689 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.989:4907) : item=3 name=/dev/.udev/db/block:ram0 inode=24554 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.989:4907) : item=2 name=/dev/.udev/db/block:ram0.tmp inode=24689 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.989:4907) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.989:4907) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.989:4907) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.989:4907) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.989:4908) : item=0 name=/dev/block/1:0 inode=3892 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:56.989:4908) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.989:4908) : arch=i386 syscall=readlink success=yes exit=7 a0=8083fb8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:56.989:4909) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.989:4909) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:56.989:4909) : item=0 name=ram10 block/1:10 
>type=CWD msg=audit(04/20/10 11:57:56.989:4909) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:56.989:4909) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.021:4911) : item=1 name=/dev/.udev/watch/108 inode=24614 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4911) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.021:4911) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.021:4911) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807e370 a3=bff1f71c items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.021:4912) : item=0 name=/dev/block/1:10 inode=3932 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.021:4912) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.021:4912) : arch=i386 syscall=readlink success=yes exit=8 a0=8079260 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.021:4913) : item=0 name=/dev/.udev/watch/122 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.021:4913) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.021:4913) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.953:5058) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:57.953:5058) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.953:5058) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4837 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.021:4914) : item=2 name=/dev/.udev/watch/122 inode=24695 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4914) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4914) : item=0 name=/devices/virtual/block/ram10 
>type=CWD msg=audit(04/20/10 11:57:57.021:4914) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.021:4914) : arch=i386 syscall=symlink success=yes exit=0 a0=807b52c a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.021:4915) : item=1 name=/dev/.udev/db/block:ram10.tmp inode=24696 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4915) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.021:4915) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.021:4915) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.021:4916) : item=4 name=/dev/.udev/db/block:ram10 inode=24696 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4916) : item=3 name=/dev/.udev/db/block:ram10 inode=24690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4916) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24696 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4916) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4916) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.021:4916) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.021:4916) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.001:4917) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:57.001:4917) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.001:4917) : arch=i386 syscall=open success=yes exit=3 a0=bfc7df46 a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4829 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.001:4918) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24691 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.001:4918) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.001:4918) : item=0 name=ram8 block/1:8 
>type=CWD msg=audit(04/20/10 11:57:57.001:4918) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.001:4918) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.033:4919) : item=4 name=/dev/.udev/db/block:ram8 inode=24691 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.033:4919) : item=3 name=/dev/.udev/db/block:ram8 inode=24613 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.033:4919) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24691 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.033:4919) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.033:4919) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.033:4919) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.033:4919) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.033:4920) : item=0 name=/dev/block/1:8 inode=3952 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.033:4920) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.033:4920) : arch=i386 syscall=readlink success=yes exit=7 a0=807fdd0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.001:4921) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:57.001:4921) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.001:4921) : arch=i386 syscall=open success=yes exit=3 a0=bf8aef46 a1=8000 a2=0 a3=804f008 items=1 ppid=4750 pid=4830 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.001:4923) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:57.001:4923) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.001:4923) : arch=i386 syscall=open success=yes exit=3 a0=bfeb9f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4828 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.033:4925) : item=0 name=/dev/.udev/watch/123 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.033:4925) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.033:4925) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807df48 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.057:4927) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:57.057:4927) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.057:4927) : arch=i386 syscall=open success=yes exit=3 a0=bfbe9f4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4823 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.061:4928) : item=2 name=/dev/.udev/watch/123 inode=24703 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.061:4928) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.061:4928) : item=0 name=/devices/virtual/block/ram8 
>type=CWD msg=audit(04/20/10 11:57:57.061:4928) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.061:4928) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807df48 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.061:4929) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24704 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.061:4929) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.061:4929) : item=0 name=ram15 block/1:15 
>type=CWD msg=audit(04/20/10 11:57:57.061:4929) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.061:4929) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.057:4930) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24702 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.057:4930) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.057:4930) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:57:57.057:4930) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.057:4930) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.069:4931) : item=4 name=/dev/.udev/db/block:ram2 inode=24702 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.069:4931) : item=3 name=/dev/.udev/db/block:ram2 inode=24681 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.069:4931) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24702 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.069:4931) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.069:4931) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.069:4931) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.069:4931) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.069:4932) : item=1 name=/dev/.udev/db/block:ram8.tmp inode=24705 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.069:4932) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.069:4932) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.069:4932) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f378 items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.041:4933) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.041:4933) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.041:4933) : item=0 name=ram11 block/1:11 
>type=CWD msg=audit(04/20/10 11:57:57.041:4933) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.041:4933) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.037:4935) : item=0 name=/dev/.udev/watch/124 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.037:4935) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.037:4935) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807fcd0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.073:4936) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.073:4936) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.073:4936) : arch=i386 syscall=readlink success=yes exit=7 a0=80801d0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.106:4937) : item=4 name=/dev/.udev/db/block:ram15 inode=24704 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.106:4937) : item=3 name=/dev/.udev/db/block:ram15 inode=24584 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.106:4937) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24704 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.106:4937) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.106:4937) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.106:4937) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.106:4937) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.110:4938) : item=4 name=/dev/.udev/db/block:ram11 inode=24701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4938) : item=3 name=/dev/.udev/db/block:ram11 inode=24654 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4938) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4938) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4938) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.110:4938) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.110:4938) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.110:4939) : item=0 name=/dev/block/1:11 inode=3907 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.110:4939) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.110:4939) : arch=i386 syscall=readlink success=yes exit=8 a0=8079ad0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.110:4940) : item=0 name=/dev/.udev/watch/127 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.110:4940) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.110:4940) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.110:4941) : item=2 name=/dev/.udev/watch/127 inode=24715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4941) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4941) : item=0 name=/devices/virtual/block/ram11 
>type=CWD msg=audit(04/20/10 11:57:57.110:4941) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.110:4941) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.110:4942) : item=4 name=/dev/.udev/db/block:ram8 inode=24705 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4942) : item=3 name=/dev/.udev/db/block:ram8 inode=24691 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4942) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24705 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4942) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4942) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.110:4942) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.110:4942) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.110:4943) : item=1 name=/dev/.udev/db/block:ram11.tmp inode=24716 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.110:4943) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.110:4943) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.110:4943) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e350 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.106:4944) : item=0 name=/dev/.udev/watch/126 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.106:4944) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.106:4944) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080af8 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4945) : item=0 name=/dev/block/1:15 inode=3927 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.126:4945) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4945) : arch=i386 syscall=readlink success=yes exit=8 a0=807fdd0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4946) : item=2 name=/dev/.udev/watch/126 inode=24718 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4946) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4946) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:57:57.126:4946) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4946) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b4c a1=bff1fbfc a2=8068008 a3=8080af8 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4947) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=24720 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4947) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.126:4947) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4947) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4948) : item=0 name=/dev/.udev/watch/128 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.126:4948) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4948) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4949) : item=2 name=/dev/.udev/watch/128 inode=24722 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4949) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4949) : item=0 name=/devices/virtual/block/ram15 
>type=CWD msg=audit(04/20/10 11:57:57.126:4949) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4949) : arch=i386 syscall=symlink success=yes exit=0 a0=806818c a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4950) : item=4 name=/dev/.udev/db/block:ram2 inode=24720 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4950) : item=3 name=/dev/.udev/db/block:ram2 inode=24702 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4950) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24720 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4950) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4950) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.126:4950) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4950) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4951) : item=1 name=/dev/.udev/db/block:ram15.tmp inode=24723 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4951) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.126:4951) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4951) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f050 items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4952) : item=4 name=/dev/.udev/db/block:ram15 inode=24723 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4952) : item=3 name=/dev/.udev/db/block:ram15 inode=24704 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4952) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24723 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4952) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4952) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.126:4952) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4952) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.057:4953) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:57.057:4953) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.057:4953) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4747 pid=4832 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.126:4954) : item=4 name=/dev/.udev/db/block:ram11 inode=24716 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4954) : item=3 name=/dev/.udev/db/block:ram11 inode=24701 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4954) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24716 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4954) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.126:4954) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.126:4954) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.126:4954) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.005:4955) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:57.005:4955) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.005:4955) : arch=i386 syscall=open success=yes exit=3 a0=bf84ef4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4824 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.118:4956) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:57.118:4956) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.118:4956) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4833 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.065:4957) : item=1 name=/dev/.udev/watch/111 inode=24629 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.065:4957) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.065:4957) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.065:4957) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.181:4958) : item=0 name=/dev/.mdadm inode=6133 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.181:4958) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.181:4958) : arch=i386 syscall=open success=yes exit=3 a0=811b270 a1=98800 a2=b76a7ff4 a3=811b270 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.181:4959) : item=0 name=/dev/.sysconfig inode=5853 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.181:4959) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.181:4959) : arch=i386 syscall=open success=yes exit=3 a0=812c2f8 a1=98800 a2=b76a7ff4 a3=812c2f8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.181:4960) : item=0 name=/dev/.sysconfig/network inode=5854 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.181:4960) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.181:4960) : arch=i386 syscall=open success=yes exit=3 a0=8134d38 a1=98800 a2=b76a7ff4 a3=8134d38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.181:4961) : item=0 name=/dev/.udev inode=5285 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.181:4961) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.181:4961) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.181:4962) : item=0 name=/dev/.udev/db inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.181:4962) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.181:4962) : arch=i386 syscall=open success=yes exit=3 a0=812a790 a1=98800 a2=b76a7ff4 a3=812a790 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.185:4963) : item=2 name=/dev/.udev/watch/124 inode=24726 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.185:4963) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.185:4963) : item=0 name=/devices/virtual/block/ram0 
>type=CWD msg=audit(04/20/10 11:57:57.185:4963) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.185:4963) : arch=i386 syscall=symlink success=yes exit=0 a0=808426c a1=bff1fbfc a2=8068008 a3=807fcd0 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.185:4964) : item=1 name=/dev/.udev/db/block:ram0.tmp inode=24727 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.185:4964) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.185:4964) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.185:4964) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8080a68 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.209:4965) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24728 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.209:4965) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.209:4965) : item=0 name=ram6 block/1:6 
>type=CWD msg=audit(04/20/10 11:57:57.209:4965) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.209:4965) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.073:4966) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:57.073:4966) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.073:4966) : arch=i386 syscall=open success=yes exit=3 a0=bfad4c69 a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4825 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.209:4967) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:57.209:4967) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.209:4967) : arch=i386 syscall=open success=yes exit=3 a0=bfb74f4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4833 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.189:4968) : item=4 name=/dev/.udev/db/block:ram0 inode=24727 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.189:4968) : item=3 name=/dev/.udev/db/block:ram0 inode=24689 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.189:4968) : item=2 name=/dev/.udev/db/block:ram0.tmp inode=24727 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.189:4968) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.189:4968) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.189:4968) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.189:4968) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.177:4969) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24724 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.177:4969) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.177:4969) : item=0 name=ram14 block/1:14 
>type=CWD msg=audit(04/20/10 11:57:57.177:4969) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.177:4969) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.533:4970) : item=4 name=/dev/.udev/db/block:ram14 inode=24724 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.533:4970) : item=3 name=/dev/.udev/db/block:ram14 inode=24634 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.533:4970) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24724 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.533:4970) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.533:4970) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.533:4970) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.533:4970) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.193:4971) : item=0 name=/dev/.udev/links inode=5781 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.193:4971) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.193:4971) : arch=i386 syscall=open success=yes exit=3 a0=812a790 a1=98800 a2=b76a7ff4 a3=812a790 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.537:4972) : item=0 name=/dev/block/1:14 inode=3912 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.537:4972) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.537:4972) : arch=i386 syscall=readlink success=yes exit=8 a0=8079880 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.537:4973) : item=0 name=/dev/.udev/watch/129 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.537:4973) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.537:4973) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.537:4974) : item=2 name=/dev/.udev/watch/129 inode=24732 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.537:4974) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.537:4974) : item=0 name=/devices/virtual/block/ram14 
>type=CWD msg=audit(04/20/10 11:57:57.537:4974) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.537:4974) : arch=i386 syscall=symlink success=yes exit=0 a0=807d9dc a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.537:4975) : item=1 name=/dev/.udev/db/block:ram14.tmp inode=24733 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.537:4975) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.537:4975) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.537:4975) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef48 items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.502:4976) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:57.502:4976) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.502:4976) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4744 pid=4834 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.193:4977) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:57.193:4977) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.193:4977) : arch=i386 syscall=open success=yes exit=3 a0=bfe50f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4747 pid=4832 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.537:4978) : item=0 name=/dev/.udev/links/cdrom inode=6029 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.537:4978) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.537:4978) : arch=i386 syscall=open success=yes exit=3 a0=8134d38 a1=98800 a2=b76a7ff4 a3=8134d38 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4979) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6038 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4979) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4979) : arch=i386 syscall=open success=yes exit=3 a0=812b510 a1=98800 a2=b76a7ff4 a3=812b510 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4980) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part1 inode=24084 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4980) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4980) : arch=i386 syscall=open success=yes exit=3 a0=812b140 a1=98800 a2=b76a7ff4 a3=812b140 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4981) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24067 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4981) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4981) : arch=i386 syscall=open success=yes exit=3 a0=812b140 a1=98800 a2=b76a7ff4 a3=812b140 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4982) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b inode=6040 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4982) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4982) : arch=i386 syscall=open success=yes exit=3 a0=812aed8 a1=98800 a2=b76a7ff4 a3=812aed8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4983) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part1 inode=24087 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4983) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4983) : arch=i386 syscall=open success=yes exit=3 a0=812aed8 a1=98800 a2=b76a7ff4 a3=812aed8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4984) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24070 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4984) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4984) : arch=i386 syscall=open success=yes exit=3 a0=812afe8 a1=98800 a2=b76a7ff4 a3=812afe8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4985) : item=0 name=/dev/.udev/links/disk\x2fby-label\x2fCDROM inode=6027 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4985) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4985) : arch=i386 syscall=open success=yes exit=3 a0=812adf0 a1=98800 a2=b76a7ff4 a3=812adf0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4986) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:01.1-scsi-1:0:0:0 inode=6025 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4986) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4986) : arch=i386 syscall=open success=yes exit=3 a0=812b178 a1=98800 a2=b76a7ff4 a3=812b178 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4987) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0 inode=6042 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4987) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4987) : arch=i386 syscall=open success=yes exit=3 a0=812b178 a1=98800 a2=b76a7ff4 a3=812b178 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4988) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part1 inode=24090 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4988) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4988) : arch=i386 syscall=open success=yes exit=3 a0=812b1c0 a1=98800 a2=b76a7ff4 a3=812b1c0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.797:4989) : item=4 name=/dev/.udev/db/block:ram6 inode=24728 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4989) : item=3 name=/dev/.udev/db/block:ram6 inode=24643 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4989) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24728 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4989) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4989) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.797:4989) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.797:4989) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.797:4990) : item=0 name=/dev/block/1:6 inode=3887 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.797:4990) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.797:4990) : arch=i386 syscall=readlink success=yes exit=7 a0=8079bd8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.797:4991) : item=0 name=/dev/.udev/watch/131 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.797:4991) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.797:4991) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080af8 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.797:4992) : item=2 name=/dev/.udev/watch/131 inode=24742 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4992) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4992) : item=0 name=/devices/virtual/block/ram6 
>type=CWD msg=audit(04/20/10 11:57:57.797:4992) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.797:4992) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=8080af8 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.797:4993) : item=1 name=/dev/.udev/db/block:ram6.tmp inode=24743 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4993) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.797:4993) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.797:4993) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807eb28 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.797:4994) : item=4 name=/dev/.udev/db/block:ram6 inode=24743 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4994) : item=3 name=/dev/.udev/db/block:ram6 inode=24728 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4994) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24743 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4994) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.797:4994) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.797:4994) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.797:4994) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.793:4995) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part2 inode=24073 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.793:4995) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.793:4995) : arch=i386 syscall=open success=yes exit=3 a0=812b140 a1=98800 a2=b76a7ff4 a3=812b140 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.801:4996) : item=0 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.801:4996) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.801:4996) : arch=i386 syscall=open success=yes exit=3 a0=812b140 a1=98800 a2=b76a7ff4 a3=812b140 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.801:4997) : item=0 name=/dev/.udev/links/dvd inode=6031 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.801:4997) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.801:4997) : arch=i386 syscall=open success=yes exit=3 a0=812b1c0 a1=98800 a2=b76a7ff4 a3=812b1c0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.801:4998) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-0-event-kbd inode=5850 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.801:4998) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.801:4998) : arch=i386 syscall=open success=yes exit=3 a0=812b1e0 a1=98800 a2=b76a7ff4 a3=812b1e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.801:4999) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-event-mouse inode=5867 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.801:4999) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.801:4999) : arch=i386 syscall=open success=yes exit=3 a0=812adf0 a1=98800 a2=b76a7ff4 a3=812adf0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.801:5000) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-i8042-serio-1-mouse inode=5861 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.801:5000) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.801:5000) : arch=i386 syscall=open success=yes exit=3 a0=812b2d8 a1=98800 a2=b76a7ff4 a3=812b2d8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.805:5001) : item=0 name=/dev/.udev/links/input\x2fby-path\x2fplatform-pcspkr-event-spkr inode=5948 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.805:5001) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.805:5001) : arch=i386 syscall=open success=yes exit=3 a0=812b2d8 a1=98800 a2=b76a7ff4 a3=812b2d8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.805:5002) : item=4 name=/dev/.udev/db/block:ram14 inode=24733 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.805:5002) : item=3 name=/dev/.udev/db/block:ram14 inode=24724 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.805:5002) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=24733 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.805:5002) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.805:5002) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.805:5002) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.805:5002) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.805:5003) : item=0 name=/dev/.udev/links/root inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.805:5003) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.805:5003) : arch=i386 syscall=open success=yes exit=3 a0=812ada8 a1=98800 a2=b76a7ff4 a3=812ada8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.809:5004) : item=0 name=/dev/.udev/links/rtc inode=6011 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.809:5004) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.809:5004) : arch=i386 syscall=open success=yes exit=3 a0=812b480 a1=98800 a2=b76a7ff4 a3=812b480 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.809:5005) : item=0 name=/dev/.udev/links/scd0 inode=6023 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.809:5005) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.809:5005) : arch=i386 syscall=open success=yes exit=3 a0=812b268 a1=98800 a2=b76a7ff4 a3=812b268 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.817:5006) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24745 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.817:5006) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.817:5006) : item=0 name=ram13 block/1:13 
>type=CWD msg=audit(04/20/10 11:57:57.817:5006) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.817:5006) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.721:5007) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:57.721:5007) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.721:5007) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4835 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.809:5008) : item=0 name=/dev/.udev/rules.d inode=5286 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.809:5008) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.809:5008) : arch=i386 syscall=open success=yes exit=3 a0=812a790 a1=98800 a2=b76a7ff4 a3=812a790 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5009) : item=0 name=/dev/.udev/watch inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5009) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5009) : arch=i386 syscall=open success=yes exit=3 a0=812a790 a1=98800 a2=b76a7ff4 a3=812a790 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5010) : item=0 name=/dev/block inode=3875 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5010) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5010) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5011) : item=0 name=/dev/bsg inode=3967 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5011) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5011) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5012) : item=0 name=/dev/char inode=2837 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5012) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5012) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5013) : item=0 name=/dev/disk inode=4020 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5013) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5013) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5014) : item=0 name=/dev/disk/by-id inode=4021 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5014) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5014) : arch=i386 syscall=open success=yes exit=3 a0=8129208 a1=98800 a2=b76a7ff4 a3=8129208 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5015) : item=0 name=/dev/disk/by-label inode=4043 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5015) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5015) : arch=i386 syscall=open success=yes exit=3 a0=8129208 a1=98800 a2=b76a7ff4 a3=8129208 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5016) : item=0 name=/dev/disk/by-path inode=4028 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5016) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5016) : arch=i386 syscall=open success=yes exit=3 a0=8129208 a1=98800 a2=b76a7ff4 a3=8129208 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5017) : item=0 name=/dev/disk/by-uuid inode=4680 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5017) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5017) : arch=i386 syscall=open success=yes exit=3 a0=8129208 a1=98800 a2=b76a7ff4 a3=8129208 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5018) : item=0 name=/dev/input inode=3125 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5018) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5018) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.889:5019) : item=0 name=/dev/input/by-path inode=3137 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.889:5019) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.889:5019) : arch=i386 syscall=open success=yes exit=3 a0=812c2f8 a1=98800 a2=b76a7ff4 a3=812c2f8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.809:5020) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:57.809:5020) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.809:5020) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4836 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.893:5021) : item=4 name=/dev/.udev/db/block:ram13 inode=24745 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.893:5021) : item=3 name=/dev/.udev/db/block:ram13 inode=24615 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.893:5021) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24745 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.893:5021) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.893:5021) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.893:5021) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.893:5021) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.893:5022) : item=0 name=/dev/block/1:13 inode=3939 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.893:5022) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.893:5022) : arch=i386 syscall=readlink success=yes exit=8 a0=807fdd0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.893:5023) : item=0 name=/dev/.udev/watch/132 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.893:5023) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.893:5023) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80680f0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.905:5024) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:57.905:5024) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.905:5024) : arch=i386 syscall=open success=yes exit=4 a0=bfc2dc4d a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4835 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.909:5025) : item=2 name=/dev/.udev/watch/132 inode=24748 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.909:5025) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.909:5025) : item=0 name=/devices/virtual/block/ram13 
>type=CWD msg=audit(04/20/10 11:57:57.909:5025) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.909:5025) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=80680f0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.909:5026) : item=1 name=/dev/.udev/db/block:ram13.tmp inode=24749 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.909:5026) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.909:5026) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.909:5026) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f7c8 items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.909:5027) : item=4 name=/dev/.udev/db/block:ram13 inode=24749 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.909:5027) : item=3 name=/dev/.udev/db/block:ram13 inode=24745 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.909:5027) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24749 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.909:5027) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.909:5027) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.909:5027) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.909:5027) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.901:5028) : item=0 name=/dev/mapper inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.901:5028) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.901:5028) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.909:5029) : item=0 name=/dev/net inode=5241 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.909:5029) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.909:5029) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.909:5030) : item=0 name=/dev/pts inode=1 dev=00:0b mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.909:5030) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.909:5030) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.909:5031) : item=0 name=/dev/shm inode=5252 dev=00:10 mode=dir,sticky,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.909:5031) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.909:5031) : arch=i386 syscall=open success=yes exit=3 a0=8128f80 a1=98800 a2=b76a7ff4 a3=8128f80 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.901:5032) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:57.901:5032) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.901:5032) : arch=i386 syscall=open success=yes exit=3 a0=bfbe0f46 a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4836 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.845:5033) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:57.845:5033) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.845:5033) : arch=i386 syscall=open success=yes exit=3 a0=bf861f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4744 pid=4834 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.921:5034) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24752 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.921:5034) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.921:5034) : item=0 name=ram12 block/1:12 
>type=CWD msg=audit(04/20/10 11:57:57.921:5034) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.921:5034) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.925:5035) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:57.925:5035) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:57.925:5035) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=48800 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:57.021:4910) : item=4 name=/dev/.udev/db/block:ram10 inode=24690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4910) : item=3 name=/dev/.udev/db/block:ram10 inode=24619 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4910) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24690 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4910) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:57.021:4910) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:57.021:4910) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:57.021:4910) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5037) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5037) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5037) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5038) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5038) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5038) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=4c002 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5039) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5039) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5039) : arch=i386 syscall=open success=yes exit=3 a0=8120638 a1=4c002 a2=0 a3=8120590 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5149) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:58.930:5149) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5149) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=4c002 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5040) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5040) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5040) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=48800 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5041) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5041) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5041) : arch=i386 syscall=open success=yes exit=6 a0=8120b90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5042) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5042) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5042) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5043) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5043) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5043) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5044) : item=4 name=/dev/.udev/db/block:ram12 inode=24752 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.001:5044) : item=3 name=/dev/.udev/db/block:ram12 inode=24630 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.001:5044) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24752 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.001:5044) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.001:5044) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5044) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5044) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.005:5045) : item=0 name=/dev/block/1:12 inode=3902 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.005:5045) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.005:5045) : arch=i386 syscall=readlink success=yes exit=8 a0=8079338 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.005:5046) : item=0 name=/dev/.udev/watch/134 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.005:5046) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.005:5046) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807db20 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.005:5047) : item=2 name=/dev/.udev/watch/134 inode=24760 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.005:5047) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.005:5047) : item=0 name=/devices/virtual/block/ram12 
>type=CWD msg=audit(04/20/10 11:57:58.005:5047) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.005:5047) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d1c a1=bff1fbfc a2=8068008 a3=807db20 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5048) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:58.009:5048) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5048) : arch=i386 syscall=open success=yes exit=3 a0=8120b90 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5049) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:58.009:5049) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5049) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=48800 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5050) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:58.009:5050) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5050) : arch=i386 syscall=open success=yes exit=6 a0=81208b8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5051) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:58.009:5051) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5051) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5052) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:58.009:5052) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5052) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5053) : item=1 name=/dev/.udev/db/block:ram12.tmp inode=24762 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.009:5053) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.009:5053) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5053) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef50 items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5054) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:58.009:5054) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5054) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=48800 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5055) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:58.009:5055) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5055) : arch=i386 syscall=open success=yes exit=6 a0=8120518 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5056) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:58.009:5056) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5056) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.009:5057) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:58.009:5057) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.009:5057) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.013:5059) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:57:58.013:5059) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.013:5059) : arch=i386 syscall=open success=yes exit=3 a0=8120518 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.013:5060) : item=4 name=/dev/.udev/db/block:ram12 inode=24762 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.013:5060) : item=3 name=/dev/.udev/db/block:ram12 inode=24752 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.013:5060) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24762 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.013:5060) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.013:5060) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.013:5060) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.013:5060) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.029:5061) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:58.029:5061) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.029:5061) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=48800 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.017:5062) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.017:5062) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.017:5062) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4838 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.365:5063) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:58.365:5063) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.365:5063) : arch=i386 syscall=open success=yes exit=3 a0=bfafbf4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4838 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.357:5064) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:58.357:5064) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.357:5064) : arch=i386 syscall=open success=yes exit=6 a0=81206d0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.533:5065) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:58.533:5065) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.533:5065) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.533:5066) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:58.533:5066) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.533:5066) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.586:5067) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:58.586:5067) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.586:5067) : arch=i386 syscall=open success=yes exit=3 a0=81206d0 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.589:5068) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.589:5068) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.589:5068) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4839 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.593:5069) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:58.593:5069) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.593:5069) : arch=i386 syscall=open success=yes exit=3 a0=bfb89f3e a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4839 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.597:5070) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.597:5070) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.597:5070) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4840 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5071) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:58.613:5071) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5071) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=48800 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5072) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:58.613:5072) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5072) : arch=i386 syscall=open success=yes exit=6 a0=8120538 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5073) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:58.613:5073) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5073) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5159) : item=0 name=/dev/.udev/db/block:ram7 inode=24676 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.930:5159) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5159) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e7c0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5074) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:58.613:5074) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5074) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=4c002 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5075) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:58.613:5075) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5075) : arch=i386 syscall=open success=yes exit=3 a0=8120538 a1=4c002 a2=0 a3=8120428 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5076) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:57:58.613:5076) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5076) : arch=i386 syscall=open success=yes exit=3 a0=8121dd0 a1=48800 a2=0 a3=8120ed0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5077) : item=0 name=/dev/loop1 inode=2792 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:01 
>type=CWD msg=audit(04/20/10 11:57:58.613:5077) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5077) : arch=i386 syscall=open success=yes exit=6 a0=8121dd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5078) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:58.613:5078) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5078) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=48800 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5079) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:58.613:5079) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5079) : arch=i386 syscall=open success=yes exit=6 a0=81208d8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5080) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:58.613:5080) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5080) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.613:5081) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:58.613:5081) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.613:5081) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=4c002 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5082) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:58.617:5082) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5082) : arch=i386 syscall=open success=yes exit=3 a0=81208d8 a1=4c002 a2=0 a3=81206e0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5083) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:57:58.617:5083) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5083) : arch=i386 syscall=open success=yes exit=3 a0=8121df0 a1=48800 a2=0 a3=8120f68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5084) : item=0 name=/dev/loop2 inode=2793 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:02 
>type=CWD msg=audit(04/20/10 11:57:58.617:5084) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5084) : arch=i386 syscall=open success=yes exit=6 a0=8121df0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5085) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.617:5085) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5085) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=48800 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5086) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.617:5086) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5086) : arch=i386 syscall=open success=yes exit=6 a0=8120bb0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5087) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.617:5087) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5087) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5088) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.617:5088) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5088) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=4c002 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5089) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.617:5089) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5089) : arch=i386 syscall=open success=yes exit=3 a0=8120bb0 a1=4c002 a2=0 a3=81209b8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5090) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:57:58.617:5090) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5090) : arch=i386 syscall=open success=yes exit=3 a0=8121e10 a1=48800 a2=0 a3=8121000 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5091) : item=0 name=/dev/loop3 inode=4671 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:03 
>type=CWD msg=audit(04/20/10 11:57:58.617:5091) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5091) : arch=i386 syscall=open success=yes exit=6 a0=8121e10 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5092) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:58.617:5092) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5092) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=48800 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5093) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:58.617:5093) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5093) : arch=i386 syscall=open success=yes exit=6 a0=8120bd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5094) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:58.617:5094) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5094) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5095) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:58.617:5095) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5095) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=4c002 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5096) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:58.617:5096) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5096) : arch=i386 syscall=open success=yes exit=3 a0=8120bd0 a1=4c002 a2=0 a3=8120a50 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5097) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:57:58.617:5097) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5097) : arch=i386 syscall=open success=yes exit=3 a0=8121e30 a1=48800 a2=0 a3=8121098 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5098) : item=0 name=/dev/loop4 inode=4654 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:04 
>type=CWD msg=audit(04/20/10 11:57:58.617:5098) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5098) : arch=i386 syscall=open success=yes exit=6 a0=8121e30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5099) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:58.617:5099) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5099) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=48800 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.621:5100) : item=0 name=/dev/.udev/db/block:ram2 inode=24720 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.621:5100) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.621:5100) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.621:5101) : item=0 name=/dev/.udev/db/block:ram3 inode=24649 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.621:5101) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.621:5101) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807d348 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.786:5102) : item=1 name=/dev/.udev/watch/115 inode=24648 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.786:5102) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.786:5102) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.786:5102) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080a88 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.621:5103) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.621:5103) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.621:5103) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4841 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5104) : item=0 name=/dev/.udev/db/block:ram4 inode=24661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.617:5104) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5104) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807db20 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.790:5105) : item=1 name=/dev/.udev/watch/118 inode=24660 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.790:5105) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.790:5105) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.790:5105) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.617:5106) : item=0 name=/dev/.udev/db/block:ram1 inode=24625 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.617:5106) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.617:5106) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.790:5107) : item=1 name=/dev/.udev/watch/110 inode=24624 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.790:5107) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.790:5107) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.790:5107) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.790:5108) : item=1 name=/dev/.udev/watch/126 inode=24718 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.790:5108) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.790:5108) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.790:5108) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80793a0 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.790:5109) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:58.790:5109) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.790:5109) : arch=i386 syscall=open success=yes exit=6 a0=8120350 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5110) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:58.794:5110) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5110) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5111) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:58.794:5111) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5111) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5112) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:58.794:5112) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5112) : arch=i386 syscall=open success=yes exit=3 a0=8120350 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5113) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:57:58.794:5113) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5113) : arch=i386 syscall=open success=yes exit=3 a0=8121e50 a1=48800 a2=0 a3=8121130 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5114) : item=0 name=/dev/loop5 inode=4645 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:05 
>type=CWD msg=audit(04/20/10 11:57:58.794:5114) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5114) : arch=i386 syscall=open success=yes exit=6 a0=8121e50 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5115) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:58.794:5115) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5115) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=48800 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5116) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:58.794:5116) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5116) : arch=i386 syscall=open success=yes exit=6 a0=8120198 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5117) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:58.794:5117) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5117) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5118) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:58.794:5118) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5118) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5119) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:58.794:5119) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5119) : arch=i386 syscall=open success=yes exit=3 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5120) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:57:58.794:5120) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5120) : arch=i386 syscall=open success=yes exit=3 a0=8121e70 a1=48800 a2=0 a3=81211c8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5121) : item=0 name=/dev/loop6 inode=4670 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:06 
>type=CWD msg=audit(04/20/10 11:57:58.794:5121) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5121) : arch=i386 syscall=open success=yes exit=6 a0=8121e70 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.798:5122) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.798:5122) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.798:5122) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4845 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.633:5123) : item=0 name=/dev/.udev/db/block:sda inode=24572 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.633:5123) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.633:5123) : arch=i386 syscall=open success=yes exit=3 a0=bf9577cc a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4837 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.798:5124) : item=0 name=/dev/.udev/db/block:ram6 inode=24743 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.798:5124) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.798:5124) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e370 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.926:5125) : item=1 name=/dev/.udev/watch/131 inode=24742 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:58.926:5125) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.926:5125) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.926:5125) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80680e0 a3=bff1f71c items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.926:5126) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:58.926:5126) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.926:5126) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=48800 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5127) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:58.930:5127) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5127) : arch=i386 syscall=open success=yes exit=6 a0=8120bf0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5128) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:58.930:5128) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5128) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5129) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.794:5129) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5129) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4842 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5130) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:58.930:5130) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5130) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=4c002 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5131) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:58.930:5131) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5131) : arch=i386 syscall=open success=yes exit=3 a0=8120bf0 a1=4c002 a2=0 a3=8120ae8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5132) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:57:58.930:5132) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5132) : arch=i386 syscall=open success=yes exit=3 a0=8121e90 a1=48800 a2=0 a3=8121260 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5133) : item=0 name=/dev/loop7 inode=4664 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:07 
>type=CWD msg=audit(04/20/10 11:57:58.930:5133) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5133) : arch=i386 syscall=open success=yes exit=6 a0=8121e90 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5134) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:58.930:5134) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5134) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=48800 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5135) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:58.930:5135) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5135) : arch=i386 syscall=open success=yes exit=6 a0=81208f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5136) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:58.930:5136) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5136) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5137) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:58.930:5137) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5137) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=4c002 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5138) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:58.930:5138) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5138) : arch=i386 syscall=open success=yes exit=3 a0=81208f8 a1=4c002 a2=0 a3=8120778 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5139) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:58.930:5139) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5139) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=48800 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5140) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:58.930:5140) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5140) : arch=i386 syscall=open success=yes exit=6 a0=8120918 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5141) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:58.930:5141) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5141) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5142) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:58.930:5142) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5142) : arch=i386 syscall=open success=yes exit=3 a0=8120918 a1=4c002 a2=0 a3=8120810 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5143) : item=0 name=/dev/.udev/db/block:ram5 inode=24669 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.794:5143) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5143) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807df48 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.807:5144) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:57:58.807:5144) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.807:5144) : arch=i386 syscall=open success=yes exit=3 a0=bf992f3e a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4841 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.794:5145) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.794:5145) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.794:5145) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4844 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.934:5146) : item=0 name=/dev/.udev/db/block:ram9 inode=24710 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.934:5146) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.934:5146) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f050 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.938:5176) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:57:58.938:5176) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.938:5176) : arch=i386 syscall=open success=yes exit=3 a0=bfc81f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4845 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.938:5177) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.938:5177) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.938:5177) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4745 pid=4846 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.938:5181) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.938:5181) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.938:5181) : arch=i386 syscall=open success=yes exit=3 a0=bf994f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4842 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.930:5182) : item=0 name=/dev/.udev/db/block:ram8 inode=24737 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:58.930:5182) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.930:5182) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807ed40 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.798:5195) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:58.798:5195) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:58.798:5195) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4843 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:58.001:5036) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:57:58.001:5036) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:58.001:5036) : arch=i386 syscall=open success=yes exit=6 a0=8120638 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.026:5148) : item=1 name=/dev/.udev/watch/120 inode=24668 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.026:5148) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.026:5148) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.026:5148) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807db20 a3=bff1f71c items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.889:5280) : item=0 name=/dev/.udev/db/block:sda inode=24572 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.889:5280) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.889:5280) : arch=i386 syscall=open success=yes exit=4 a0=bf95490c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4856 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.026:5150) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:59.026:5150) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.026:5150) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=48800 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.026:5151) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:59.026:5151) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.026:5151) : arch=i386 syscall=open success=yes exit=6 a0=811ff88 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5152) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:59.030:5152) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5152) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5153) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:59.030:5153) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5153) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.889:5293) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24842 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.889:5293) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.889:5293) : item=0 name=ram13 block/1:13 
>type=CWD msg=audit(04/20/10 11:57:59.889:5293) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.889:5293) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5154) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:59.030:5154) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5154) : arch=i386 syscall=open success=yes exit=3 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.885:5276) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24840 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.885:5276) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.885:5276) : item=0 name=ram9 block/1:9 
>type=CWD msg=audit(04/20/10 11:57:59.885:5276) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.885:5276) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.877:5277) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24838 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.877:5277) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.877:5277) : item=0 name=ram11 block/1:11 
>type=CWD msg=audit(04/20/10 11:57:59.877:5277) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.877:5277) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.877:5308) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24839 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.877:5308) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.877:5308) : item=0 name=ram8 block/1:8 
>type=CWD msg=audit(04/20/10 11:57:59.877:5308) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.877:5308) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.893:5316) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.893:5316) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.893:5316) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4858 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5155) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:59.030:5155) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5155) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=48800 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5156) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:59.030:5156) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5156) : arch=i386 syscall=open success=yes exit=6 a0=811fc30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5157) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:59.030:5157) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5157) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5158) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:59.030:5158) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5158) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5160) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:59.030:5160) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5160) : arch=i386 syscall=open success=yes exit=3 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5161) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:59.030:5161) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5161) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=48800 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5162) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:59.030:5162) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5162) : arch=i386 syscall=open success=yes exit=6 a0=8120098 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5163) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:59.030:5163) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5163) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5164) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:59.030:5164) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5164) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5165) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:59.030:5165) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5165) : arch=i386 syscall=open success=yes exit=3 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5166) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:59.030:5166) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5166) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=48800 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5167) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:59.030:5167) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5167) : arch=i386 syscall=open success=yes exit=6 a0=8120278 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5168) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:59.030:5168) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5168) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5169) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:59.030:5169) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5169) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5170) : item=1 name=/dev/.udev/watch/117 inode=24675 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.030:5170) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.030:5170) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5170) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80680f0 a3=bff1f71c items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.026:5147) : item=1 name=/dev/.udev/watch/125 inode=24709 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.026:5147) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.026:5147) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.026:5147) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5171) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:59.030:5171) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5171) : arch=i386 syscall=open success=yes exit=3 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5172) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:59.030:5172) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5172) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=48800 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.042:5173) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.042:5173) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.042:5173) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4847 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.050:5174) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.050:5174) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.050:5174) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4747 pid=4850 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.046:5175) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.046:5175) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.046:5175) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4750 pid=4848 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.038:5178) : item=0 name=/dev/.udev/db/block:ram11 inode=24716 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.038:5178) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.038:5178) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f950 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.190:5179) : item=1 name=/dev/.udev/watch/127 inode=24715 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.190:5179) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.190:5179) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.190:5179) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.042:5180) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:59.042:5180) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.042:5180) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4837 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.194:5183) : item=1 name=/dev/.udev/watch/130 inode=24736 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.194:5183) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.194:5183) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.194:5183) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807eb98 a3=bff1f71c items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.038:5184) : item=0 name=/dev/.udev/db/block:ram12 inode=24762 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.038:5184) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.038:5184) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068440 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.198:5185) : item=1 name=/dev/.udev/watch/134 inode=24760 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.198:5185) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.198:5185) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.198:5185) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.034:5186) : item=0 name=/dev/.udev/db/block:ram10 inode=24696 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.034:5186) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.034:5186) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f4d0 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.202:5187) : item=1 name=/dev/.udev/watch/122 inode=24695 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.202:5187) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.202:5187) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.202:5187) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.202:5188) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24789 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.202:5188) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.202:5188) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:57:59.202:5188) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.202:5188) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.202:5189) : item=4 name=/dev/.udev/db/block:ram2 inode=24789 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.202:5189) : item=3 name=/dev/.udev/db/block:ram2 inode=24720 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.202:5189) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24789 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.202:5189) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.202:5189) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.202:5189) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.202:5189) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.206:5190) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.206:5190) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.206:5190) : arch=i386 syscall=readlink success=yes exit=7 a0=8079c20 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.206:5191) : item=0 name=/dev/.udev/watch/137 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.206:5191) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.206:5191) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080af8 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.206:5192) : item=2 name=/dev/.udev/watch/137 inode=24792 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.206:5192) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.206:5192) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:57:59.206:5192) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.206:5192) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=8080af8 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.206:5193) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=24793 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.206:5193) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.206:5193) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.206:5193) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.206:5194) : item=4 name=/dev/.udev/db/block:ram2 inode=24793 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.206:5194) : item=3 name=/dev/.udev/db/block:ram2 inode=24789 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.206:5194) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=24793 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.206:5194) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.206:5194) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.206:5194) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.206:5194) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.034:5196) : item=0 name=/dev/.udev/db/block:ram13 inode=24749 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.034:5196) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.034:5196) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80688c0 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.210:5197) : item=1 name=/dev/.udev/watch/132 inode=24748 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.210:5197) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.210:5197) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.210:5197) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.030:5198) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:59.030:5198) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.030:5198) : arch=i386 syscall=open success=yes exit=6 a0=8120298 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.214:5199) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:59.214:5199) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.214:5199) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.214:5200) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:59.214:5200) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.214:5200) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.266:5201) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.266:5201) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.266:5201) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4856 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.266:5202) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:57:59.266:5202) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.266:5202) : arch=i386 syscall=open success=yes exit=3 a0=bf97bf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4843 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.230:5203) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.230:5203) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.230:5203) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4756 pid=4851 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.266:5204) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:57:59.266:5204) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.266:5204) : arch=i386 syscall=open success=yes exit=3 a0=bfe6af4b a1=8000 a2=0 a3=804f008 items=1 ppid=4747 pid=4850 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.230:5205) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.230:5205) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.230:5205) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4749 pid=4852 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.262:5206) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24802 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.262:5206) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.262:5206) : item=0 name=ram3 block/1:3 
>type=CWD msg=audit(04/20/10 11:57:59.262:5206) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.262:5206) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.510:5207) : item=4 name=/dev/.udev/db/block:ram3 inode=24802 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5207) : item=3 name=/dev/.udev/db/block:ram3 inode=24649 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5207) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24802 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5207) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5207) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.510:5207) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.510:5207) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.510:5208) : item=0 name=/dev/block/1:3 inode=3947 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.510:5208) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.510:5208) : arch=i386 syscall=readlink success=yes exit=7 a0=80803c8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.510:5209) : item=0 name=/dev/.udev/watch/139 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.510:5209) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.510:5209) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.510:5210) : item=2 name=/dev/.udev/watch/139 inode=24805 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5210) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5210) : item=0 name=/devices/virtual/block/ram3 
>type=CWD msg=audit(04/20/10 11:57:59.510:5210) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.510:5210) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.510:5212) : item=1 name=/dev/.udev/db/block:ram3.tmp inode=24806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5212) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.510:5212) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.510:5212) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e730 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.230:5211) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.230:5211) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.230:5211) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4757 pid=4853 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.510:5213) : item=4 name=/dev/.udev/db/block:ram3 inode=24806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5213) : item=3 name=/dev/.udev/db/block:ram3 inode=24802 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5213) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=24806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5213) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.510:5213) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.510:5213) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.510:5213) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.262:5214) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:57:59.262:5214) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.262:5214) : arch=i386 syscall=open success=yes exit=3 a0=bfaa0f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4844 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.258:5215) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:57:59.258:5215) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.258:5215) : arch=i386 syscall=open success=yes exit=3 a0=bfd26f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4745 pid=4846 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.234:5216) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.234:5216) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.234:5216) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4758 pid=4855 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.234:5217) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.234:5217) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.234:5217) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4755 pid=4854 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.518:5218) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24807 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.518:5218) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.518:5218) : item=0 name=ram7 block/1:7 
>type=CWD msg=audit(04/20/10 11:57:59.518:5218) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.518:5218) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5219) : item=4 name=/dev/.udev/db/block:ram7 inode=24807 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5219) : item=3 name=/dev/.udev/db/block:ram7 inode=24676 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5219) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24807 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5219) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5219) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.522:5219) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5219) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5221) : item=0 name=/dev/block/1:7 inode=3917 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.522:5221) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5221) : arch=i386 syscall=readlink success=yes exit=7 a0=8079338 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.050:5220) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.050:5220) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.050:5220) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4744 pid=4849 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5222) : item=0 name=/dev/.udev/watch/140 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.522:5222) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5222) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e370 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5223) : item=2 name=/dev/.udev/watch/140 inode=24810 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5223) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5223) : item=0 name=/devices/virtual/block/ram7 
>type=CWD msg=audit(04/20/10 11:57:59.522:5223) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5223) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=807e370 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5224) : item=1 name=/dev/.udev/db/block:ram7.tmp inode=24811 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5224) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.522:5224) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5224) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f7c8 items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5225) : item=4 name=/dev/.udev/db/block:ram7 inode=24811 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5225) : item=3 name=/dev/.udev/db/block:ram7 inode=24807 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5225) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=24811 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5225) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.522:5225) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.522:5225) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5225) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5226) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:57:59.522:5226) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5226) : arch=i386 syscall=open success=yes exit=3 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5227) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:59.522:5227) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5227) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=48800 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5228) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:59.522:5228) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5228) : arch=i386 syscall=open success=yes exit=6 a0=81209a8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5229) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:59.522:5229) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5229) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5230) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:59.522:5230) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5230) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=4c002 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5231) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:57:59.522:5231) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5231) : arch=i386 syscall=open success=yes exit=3 a0=81209a8 a1=4c002 a2=0 a3=8120360 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.522:5232) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:57:59.522:5232) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:57:59.522:5232) : arch=i386 syscall=open success=yes exit=3 a0=81208b8 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4761 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.271:5233) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:57:59.271:5233) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.271:5233) : arch=i386 syscall=open success=yes exit=3 a0=bf8eaf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4750 pid=4848 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.534:5234) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24815 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.534:5234) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.534:5234) : item=0 name=ram1 block/1:1 
>type=CWD msg=audit(04/20/10 11:57:59.534:5234) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.534:5234) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.673:5235) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:57:59.673:5235) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.673:5235) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4856 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.550:5236) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:57:59.550:5236) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.550:5236) : arch=i386 syscall=open success=yes exit=3 a0=bf958f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4756 pid=4851 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.554:5237) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:57:59.554:5237) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.554:5237) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4857 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.546:5238) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:57:59.546:5238) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.546:5238) : arch=i386 syscall=open success=yes exit=3 a0=bfd2af46 a1=8000 a2=0 a3=804f008 items=1 ppid=4758 pid=4855 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.542:5239) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:57:59.542:5239) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.542:5239) : arch=i386 syscall=open success=yes exit=3 a0=bfe21f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4757 pid=4853 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.550:5240) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:57:59.550:5240) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.550:5240) : arch=i386 syscall=open success=yes exit=3 a0=bfe2ef46 a1=8000 a2=0 a3=804f008 items=1 ppid=4755 pid=4854 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.542:5241) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:57:59.542:5241) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.542:5241) : arch=i386 syscall=open success=yes exit=3 a0=bfd6af4b a1=8000 a2=0 a3=804f008 items=1 ppid=4749 pid=4852 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.550:5242) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:57:59.550:5242) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.550:5242) : arch=i386 syscall=open success=yes exit=3 a0=bf904f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4744 pid=4849 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.534:5243) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24813 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.534:5243) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.534:5243) : item=0 name=ram6 block/1:6 
>type=CWD msg=audit(04/20/10 11:57:59.534:5243) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.534:5243) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.861:5244) : item=4 name=/dev/.udev/db/block:ram6 inode=24813 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.861:5244) : item=3 name=/dev/.udev/db/block:ram6 inode=24743 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.861:5244) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24813 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.861:5244) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.861:5244) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.861:5244) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.861:5244) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.865:5245) : item=0 name=/dev/block/1:6 inode=3887 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.865:5245) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.865:5245) : arch=i386 syscall=readlink success=yes exit=7 a0=8079338 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.865:5246) : item=0 name=/dev/.udev/watch/141 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.865:5246) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.865:5246) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807df48 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.865:5247) : item=2 name=/dev/.udev/watch/141 inode=24821 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.865:5247) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.865:5247) : item=0 name=/devices/virtual/block/ram6 
>type=CWD msg=audit(04/20/10 11:57:59.865:5247) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.865:5247) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807df48 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.865:5248) : item=1 name=/dev/.udev/db/block:ram6.tmp inode=24822 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.865:5248) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.865:5248) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.865:5248) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f378 items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.865:5249) : item=4 name=/dev/.udev/db/block:ram6 inode=24822 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.865:5249) : item=3 name=/dev/.udev/db/block:ram6 inode=24813 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.865:5249) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=24822 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.865:5249) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.865:5249) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.865:5249) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.865:5249) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.534:5250) : item=0 name=/dev/.udev/db/block:ram15 inode=24757 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.534:5250) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.534:5250) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5251) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24823 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5251) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5251) : item=0 name=ram5 block/1:5 
>type=CWD msg=audit(04/20/10 11:57:59.869:5251) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5251) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5252) : item=4 name=/dev/.udev/db/block:ram5 inode=24823 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5252) : item=3 name=/dev/.udev/db/block:ram5 inode=24669 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5252) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24823 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5252) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5252) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5252) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5252) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5253) : item=0 name=/dev/block/1:5 inode=3897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5253) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5253) : arch=i386 syscall=readlink success=yes exit=7 a0=80807f8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5254) : item=1 name=/dev/.udev/watch/133 inode=24756 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5254) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5254) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5254) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5255) : item=0 name=/dev/.udev/watch/142 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5255) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5255) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080af8 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5256) : item=2 name=/dev/.udev/watch/142 inode=24826 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5256) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5256) : item=0 name=/devices/virtual/block/ram5 
>type=CWD msg=audit(04/20/10 11:57:59.869:5256) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5256) : arch=i386 syscall=symlink success=yes exit=0 a0=8080bac a1=bff1fbfc a2=8068008 a3=8080af8 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5257) : item=1 name=/dev/.udev/db/block:ram5.tmp inode=24828 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5257) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5257) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5257) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef50 items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5258) : item=4 name=/dev/.udev/db/block:ram5 inode=24828 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5258) : item=3 name=/dev/.udev/db/block:ram5 inode=24823 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5258) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24828 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5258) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5258) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5258) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5258) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5259) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24829 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5259) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5259) : item=0 name=ram10 block/1:10 
>type=CWD msg=audit(04/20/10 11:57:59.869:5259) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5259) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5260) : item=4 name=/dev/.udev/db/block:ram10 inode=24829 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5260) : item=3 name=/dev/.udev/db/block:ram10 inode=24696 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5260) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24829 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5260) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5260) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5260) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5260) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5261) : item=0 name=/dev/block/1:10 inode=3932 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5261) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5261) : arch=i386 syscall=readlink success=yes exit=8 a0=8080000 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5262) : item=0 name=/dev/.udev/watch/143 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.869:5262) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5262) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f050 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.869:5263) : item=2 name=/dev/.udev/watch/143 inode=24832 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5263) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.869:5263) : item=0 name=/devices/virtual/block/ram10 
>type=CWD msg=audit(04/20/10 11:57:59.869:5263) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.869:5263) : arch=i386 syscall=symlink success=yes exit=0 a0=807f1cc a1=bff1fbfc a2=8068008 a3=807f050 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5264) : item=1 name=/dev/.udev/db/block:ram10.tmp inode=24833 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5264) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.873:5264) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5264) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f4d0 items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5265) : item=4 name=/dev/.udev/db/block:ram10 inode=24833 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5265) : item=3 name=/dev/.udev/db/block:ram10 inode=24829 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5265) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=24833 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5265) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5265) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.873:5265) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5265) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.534:5266) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.534:5266) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.534:5266) : item=0 name=ram4 block/1:4 
>type=CWD msg=audit(04/20/10 11:57:59.534:5266) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.534:5266) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5267) : item=4 name=/dev/.udev/db/block:ram4 inode=24814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5267) : item=3 name=/dev/.udev/db/block:ram4 inode=24661 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5267) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5267) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5267) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.873:5267) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5267) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5268) : item=0 name=/dev/block/1:4 inode=3922 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.873:5268) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5268) : arch=i386 syscall=readlink success=yes exit=7 a0=80805d8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5269) : item=0 name=/dev/.udev/watch/144 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.873:5269) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5269) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807d700 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5270) : item=2 name=/dev/.udev/watch/144 inode=24836 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5270) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5270) : item=0 name=/devices/virtual/block/ram4 
>type=CWD msg=audit(04/20/10 11:57:59.873:5270) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5270) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807d700 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5271) : item=1 name=/dev/.udev/db/block:ram4.tmp inode=24837 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5271) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.873:5271) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5271) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807eb18 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5272) : item=4 name=/dev/.udev/db/block:ram4 inode=24837 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5272) : item=3 name=/dev/.udev/db/block:ram4 inode=24814 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5272) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=24837 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5272) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.873:5272) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.873:5272) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5272) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.885:5273) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24841 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.885:5273) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:57:59.885:5273) : item=0 name=ram12 block/1:12 
>type=CWD msg=audit(04/20/10 11:57:59.885:5273) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.885:5273) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:57:59.873:5274) : item=0 name=/dev/.udev/db/block:ram5 inode=24828 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:57:59.873:5274) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:57:59.873:5274) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807d348 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:00.297:5317) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:00.297:5317) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:00.297:5317) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:00.037:5275) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:00.037:5275) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:00.037:5275) : arch=i386 syscall=open success=yes exit=3 a0=bfe3cf46 a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4857 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.101:5279) : item=0 name=/dev/block/1:11 inode=3907 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.101:5279) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.101:5279) : arch=i386 syscall=readlink success=yes exit=8 a0=807fd60 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.105:5281) : item=4 name=/dev/.udev/db/block:ram9 inode=24840 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.105:5281) : item=3 name=/dev/.udev/db/block:ram9 inode=24710 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.105:5281) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24840 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.105:5281) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.105:5281) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.105:5281) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.105:5281) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.105:5282) : item=0 name=/dev/block/1:9 inode=3940 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.105:5282) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.105:5282) : arch=i386 syscall=readlink success=yes exit=7 a0=8079338 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.105:5283) : item=0 name=/dev/.udev/watch/145 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.105:5283) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.105:5283) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.105:5284) : item=2 name=/dev/.udev/watch/145 inode=24847 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.105:5284) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.105:5284) : item=0 name=/devices/virtual/block/ram9 
>type=CWD msg=audit(04/20/10 11:58:01.105:5284) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.105:5284) : arch=i386 syscall=symlink success=yes exit=0 a0=8080a6c a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.109:5285) : item=1 name=/dev/.udev/db/block:ram9.tmp inode=24848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5285) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.109:5285) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.109:5285) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f050 items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.109:5286) : item=4 name=/dev/.udev/db/block:ram9 inode=24848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5286) : item=3 name=/dev/.udev/db/block:ram9 inode=24840 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5286) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=24848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5286) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5286) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.109:5286) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.109:5286) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.109:5287) : item=4 name=/dev/.udev/db/block:ram1 inode=24815 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5287) : item=3 name=/dev/.udev/db/block:ram1 inode=24625 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5287) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24815 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5287) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.109:5287) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.109:5287) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.109:5287) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.109:5288) : item=0 name=/dev/block/1:1 inode=3882 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.109:5288) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.109:5288) : arch=i386 syscall=readlink success=yes exit=7 a0=8079338 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5289) : item=0 name=/dev/.udev/watch/146 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5289) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5289) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5290) : item=2 name=/dev/.udev/watch/146 inode=24851 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5290) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5290) : item=0 name=/devices/virtual/block/ram1 
>type=CWD msg=audit(04/20/10 11:58:01.113:5290) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5290) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5291) : item=1 name=/dev/.udev/db/block:ram1.tmp inode=24852 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5291) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5291) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5291) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5292) : item=4 name=/dev/.udev/db/block:ram1 inode=24852 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5292) : item=3 name=/dev/.udev/db/block:ram1 inode=24815 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5292) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=24852 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5292) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5292) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5292) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5292) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5294) : item=4 name=/dev/.udev/db/block:ram13 inode=24842 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5294) : item=3 name=/dev/.udev/db/block:ram13 inode=24749 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5294) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24842 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5294) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5294) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5294) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5294) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5295) : item=0 name=/dev/block/1:13 inode=3939 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5295) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5295) : arch=i386 syscall=readlink success=yes exit=8 a0=8080000 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5296) : item=4 name=/dev/.udev/db/block:ram12 inode=24841 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5296) : item=3 name=/dev/.udev/db/block:ram12 inode=24762 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5296) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24841 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5296) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5296) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5296) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5296) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5297) : item=0 name=/dev/block/1:12 inode=3902 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5297) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5297) : arch=i386 syscall=readlink success=yes exit=8 a0=80805d8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5298) : item=0 name=/dev/.udev/watch/147 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5298) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5298) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068440 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.101:5278) : item=4 name=/dev/.udev/db/block:ram11 inode=24838 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.101:5278) : item=3 name=/dev/.udev/db/block:ram11 inode=24716 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.101:5278) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24838 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.101:5278) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.101:5278) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.101:5278) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.101:5278) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5299) : item=2 name=/dev/.udev/watch/147 inode=24855 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5299) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5299) : item=0 name=/devices/virtual/block/ram13 
>type=CWD msg=audit(04/20/10 11:58:01.113:5299) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5299) : arch=i386 syscall=symlink success=yes exit=0 a0=80685bc a1=bff1fbfc a2=8068008 a3=8068440 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5300) : item=1 name=/dev/.udev/db/block:ram13.tmp inode=24858 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5300) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5300) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5300) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8069c68 items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5301) : item=0 name=/dev/.udev/watch/148 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5301) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5301) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f950 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5302) : item=4 name=/dev/.udev/db/block:ram13 inode=24858 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5302) : item=3 name=/dev/.udev/db/block:ram13 inode=24842 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5302) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=24858 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5302) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5302) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5302) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5302) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5303) : item=2 name=/dev/.udev/watch/148 inode=24859 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5303) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5303) : item=0 name=/devices/virtual/block/ram12 
>type=CWD msg=audit(04/20/10 11:58:01.113:5303) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5303) : arch=i386 syscall=symlink success=yes exit=0 a0=807facc a1=bff1fbfc a2=8068008 a3=807f950 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.113:5304) : item=1 name=/dev/.udev/db/block:ram12.tmp inode=24860 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.113:5304) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.113:5304) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.113:5304) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=80697e8 items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.174:5305) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:01.174:5305) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.174:5305) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4861 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.121:5306) : item=0 name=/dev/.udev/watch/149 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.121:5306) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.121:5306) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f4d0 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.170:5307) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:01.170:5307) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.170:5307) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4860 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.457:5309) : item=4 name=/dev/.udev/db/block:ram8 inode=24839 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5309) : item=3 name=/dev/.udev/db/block:ram8 inode=24737 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5309) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24839 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5309) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5309) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.457:5309) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.457:5309) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.457:5310) : item=0 name=/dev/block/1:8 inode=3952 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.457:5310) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.457:5310) : arch=i386 syscall=readlink success=yes exit=7 a0=8080000 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.457:5311) : item=0 name=/dev/.udev/watch/152 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.457:5311) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.457:5311) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e7c0 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.457:5312) : item=2 name=/dev/.udev/watch/152 inode=24876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5312) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5312) : item=0 name=/devices/virtual/block/ram8 
>type=CWD msg=audit(04/20/10 11:58:01.457:5312) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.457:5312) : arch=i386 syscall=symlink success=yes exit=0 a0=8080bac a1=bff1fbfc a2=8068008 a3=807e7c0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.457:5313) : item=1 name=/dev/.udev/db/block:ram8.tmp inode=24877 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5313) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.457:5313) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.457:5313) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ed40 items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.457:5314) : item=4 name=/dev/.udev/db/block:ram8 inode=24877 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5314) : item=3 name=/dev/.udev/db/block:ram8 inode=24839 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5314) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=24877 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5314) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.457:5314) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.457:5314) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.457:5314) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.461:5315) : item=1 name=/dev/.udev/watch/142 inode=24826 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.461:5315) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.461:5315) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.461:5315) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080a88 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.461:5318) : item=2 name=/dev/.udev/watch/149 inode=24879 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.461:5318) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.461:5318) : item=0 name=/devices/virtual/block/ram11 
>type=CWD msg=audit(04/20/10 11:58:01.461:5318) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.461:5318) : arch=i386 syscall=symlink success=yes exit=0 a0=807f64c a1=bff1fbfc a2=8068008 a3=807f4d0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.461:5319) : item=1 name=/dev/.udev/db/block:ram11.tmp inode=24880 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.461:5319) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.461:5319) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.461:5319) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f950 items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.461:5320) : item=4 name=/dev/.udev/db/block:ram11 inode=24880 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.461:5320) : item=3 name=/dev/.udev/db/block:ram11 inode=24838 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.461:5320) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=24880 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.461:5320) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.461:5320) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.461:5320) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.461:5320) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.461:5321) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:01.461:5321) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.461:5321) : arch=i386 syscall=open success=yes exit=3 a0=bfd09c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4860 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.461:5322) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:01.461:5322) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.461:5322) : arch=i386 syscall=open success=yes exit=3 a0=bff14f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4858 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.501:5323) : item=4 name=/dev/.udev/db/block:ram12 inode=24860 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.501:5323) : item=3 name=/dev/.udev/db/block:ram12 inode=24841 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.501:5323) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=24860 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.501:5323) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.501:5323) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.501:5323) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.501:5323) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.521:5324) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:01.521:5324) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.521:5324) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4862 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.521:5325) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:01.521:5325) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.521:5325) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4863 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.525:5326) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:01.525:5326) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.525:5326) : arch=i386 syscall=open success=yes exit=3 a0=bf950c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4861 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.529:5327) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24883 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5327) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5327) : item=0 name=ram15 block/1:15 
>type=CWD msg=audit(04/20/10 11:58:01.529:5327) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.529:5327) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.529:5328) : item=4 name=/dev/.udev/db/block:ram15 inode=24883 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5328) : item=3 name=/dev/.udev/db/block:ram15 inode=24757 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5328) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24883 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5328) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5328) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.529:5328) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.529:5328) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.529:5329) : item=0 name=/dev/block/1:15 inode=3927 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.529:5329) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.529:5329) : arch=i386 syscall=readlink success=yes exit=8 a0=8079880 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.529:5330) : item=0 name=/dev/.udev/watch/153 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.529:5330) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.529:5330) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80793a0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.529:5331) : item=2 name=/dev/.udev/watch/153 inode=24886 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5331) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5331) : item=0 name=/devices/virtual/block/ram15 
>type=CWD msg=audit(04/20/10 11:58:01.529:5331) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.529:5331) : arch=i386 syscall=symlink success=yes exit=0 a0=8080bac a1=bff1fbfc a2=8068008 a3=80793a0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.529:5332) : item=1 name=/dev/.udev/db/block:ram15.tmp inode=24887 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5332) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.529:5332) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.529:5332) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.529:5333) : item=4 name=/dev/.udev/db/block:ram15 inode=24887 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5333) : item=3 name=/dev/.udev/db/block:ram15 inode=24883 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5333) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=24887 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5333) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.529:5333) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.529:5333) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.529:5333) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.541:5334) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:01.541:5334) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.541:5334) : arch=i386 syscall=open success=yes exit=3 a0=bfcadf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4862 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.545:5335) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:01.545:5335) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.545:5335) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4864 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.565:5336) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:01.565:5336) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.565:5336) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4865 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.561:5337) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24890 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.561:5337) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:01.561:5337) : item=0 name=ram5 block/1:5 
>type=CWD msg=audit(04/20/10 11:58:01.561:5337) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.561:5337) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:01.969:5338) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:01.969:5338) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:01.969:5338) : arch=i386 syscall=open success=yes exit=3 a0=bfcc92bc a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4864 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.841:5340) : item=4 name=/dev/.udev/db/block:ram5 inode=24890 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.841:5340) : item=3 name=/dev/.udev/db/block:ram5 inode=24828 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.841:5340) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24890 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.841:5340) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.841:5340) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:02.841:5340) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.841:5340) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.841:5341) : item=0 name=/dev/block/1:5 inode=3897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:02.841:5341) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.841:5341) : arch=i386 syscall=readlink success=yes exit=7 a0=80801d0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.841:5342) : item=0 name=/dev/.udev/watch/154 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:02.841:5342) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.841:5342) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.841:5343) : item=2 name=/dev/.udev/watch/154 inode=24897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.841:5343) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.841:5343) : item=0 name=/devices/virtual/block/ram5 
>type=CWD msg=audit(04/20/10 11:58:02.841:5343) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.841:5343) : arch=i386 syscall=symlink success=yes exit=0 a0=8080254 a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.861:5344) : item=1 name=/dev/.udev/db/block:ram5.tmp inode=24904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.861:5344) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:02.861:5344) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.861:5344) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e730 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.413:5345) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:02.413:5345) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.413:5345) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.865:5346) : item=4 name=/dev/.udev/db/block:ram5 inode=24904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.865:5346) : item=3 name=/dev/.udev/db/block:ram5 inode=24890 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.865:5346) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=24904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.865:5346) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:02.865:5346) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:02.865:5346) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.865:5346) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.869:5347) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:02.869:5347) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.869:5347) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4866 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.893:5348) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:02.893:5348) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.893:5348) : arch=i386 syscall=open success=yes exit=3 a0=bfc07c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4866 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.901:5349) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:02.901:5349) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.901:5349) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4867 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.905:5350) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:02.905:5350) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.905:5350) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4868 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.913:5351) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:02.913:5351) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.913:5351) : arch=i386 syscall=open success=yes exit=3 a0=bfaae56c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4868 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.913:5352) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:02.913:5352) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.913:5352) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4868 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.929:5353) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:02.929:5353) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.929:5353) : arch=i386 syscall=open success=yes exit=4 a0=8120690 a1=4c000 a2=0 a3=81205e8 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.937:5354) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:02.937:5354) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.937:5354) : arch=i386 syscall=open success=yes exit=4 a0=8120be8 a1=4c000 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.937:5355) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:02.937:5355) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.937:5355) : arch=i386 syscall=open success=yes exit=4 a0=8120910 a1=4c000 a2=0 a3=811fd98 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.937:5356) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:02.937:5356) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.937:5356) : arch=i386 syscall=open success=yes exit=5 a0=8120570 a1=4c000 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.937:5357) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:02.937:5357) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.937:5357) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4869 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.937:5358) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:02.937:5358) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.937:5358) : arch=i386 syscall=open success=yes exit=5 a0=8120728 a1=4c000 a2=0 a3=811fc40 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.945:5359) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:02.945:5359) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.945:5359) : arch=i386 syscall=open success=yes exit=3 a0=bf9a4c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4869 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5360) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:02.953:5360) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5360) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4870 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5361) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:02.953:5361) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5361) : arch=i386 syscall=open success=yes exit=5 a0=8120590 a1=4c000 a2=0 a3=8120480 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5362) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:02.953:5362) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5362) : arch=i386 syscall=open success=yes exit=5 a0=8120930 a1=4c000 a2=0 a3=8120738 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5363) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:02.953:5363) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5363) : arch=i386 syscall=open success=yes exit=5 a0=8120c08 a1=4c000 a2=0 a3=8120a10 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5364) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:02.953:5364) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5364) : arch=i386 syscall=open success=yes exit=5 a0=8120c28 a1=4c000 a2=0 a3=8120aa8 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5365) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:02.953:5365) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5365) : arch=i386 syscall=open success=yes exit=5 a0=81203a8 a1=4c000 a2=0 a3=81202a8 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5366) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:02.953:5366) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5366) : arch=i386 syscall=open success=yes exit=5 a0=8120198 a1=4c000 a2=0 a3=81200a8 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.837:5339) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:02.837:5339) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.837:5339) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4864 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5367) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:02.953:5367) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5367) : arch=i386 syscall=open success=yes exit=5 a0=8120c48 a1=4c000 a2=0 a3=8120b40 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5368) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:02.953:5368) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5368) : arch=i386 syscall=open success=yes exit=5 a0=8120950 a1=4c000 a2=0 a3=81207d0 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5369) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:02.953:5369) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5369) : arch=i386 syscall=open success=yes exit=5 a0=8120970 a1=4c000 a2=0 a3=8120868 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5370) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:02.953:5370) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5370) : arch=i386 syscall=open success=yes exit=5 a0=811ff88 a1=4c000 a2=0 a3=811ff00 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5371) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:02.953:5371) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5371) : arch=i386 syscall=open success=yes exit=5 a0=811fc30 a1=4c000 a2=0 a3=811fba8 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5372) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:02.953:5372) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5372) : arch=i386 syscall=open success=yes exit=5 a0=8120098 a1=4c000 a2=0 a3=811fe60 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5373) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:02.953:5373) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5373) : arch=i386 syscall=open success=yes exit=5 a0=8120278 a1=4c000 a2=0 a3=811fa68 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5374) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:02.953:5374) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5374) : arch=i386 syscall=open success=yes exit=5 a0=8120298 a1=4c000 a2=0 a3=811fb08 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5375) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:02.953:5375) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5375) : arch=i386 syscall=open success=yes exit=5 a0=8120a00 a1=4c000 a2=0 a3=81203b8 items=1 ppid=4147 pid=4859 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.953:5376) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:02.953:5376) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.953:5376) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4871 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.977:5377) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:02.977:5377) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.977:5377) : arch=i386 syscall=open success=yes exit=3 a0=bfab885c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4871 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.981:5378) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:02.981:5378) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.981:5378) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4871 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.994:5379) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:02.994:5379) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.994:5379) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4872 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:02.998:5380) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:02.998:5380) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:02.998:5380) : arch=i386 syscall=open success=yes exit=3 a0=bf92ec2a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4872 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.006:5382) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.006:5382) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.006:5382) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4874 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.002:5381) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.002:5381) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.002:5381) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4873 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.014:5383) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.014:5383) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.014:5383) : arch=i386 syscall=open success=yes exit=3 a0=bf8b390c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4874 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.014:5384) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:03.014:5384) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.014:5384) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4874 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.022:5385) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.022:5385) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.022:5385) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4875 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.038:5386) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:03.038:5386) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.038:5386) : arch=i386 syscall=open success=yes exit=3 a0=bfdffc2a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4875 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.042:5387) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.042:5387) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.042:5387) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4876 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.046:5388) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.046:5388) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.046:5388) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4877 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.054:5389) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.054:5389) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.054:5389) : arch=i386 syscall=open success=yes exit=3 a0=bff0532c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4877 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.054:5390) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:03.054:5390) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.054:5390) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4877 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.058:5391) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.058:5391) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.058:5391) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4878 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.082:5392) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.082:5392) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.082:5392) : arch=i386 syscall=open success=yes exit=3 a0=bff3a69c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4865 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.506:5393) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:03.506:5393) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.506:5393) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4865 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.510:5394) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:03.510:5394) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.510:5394) : arch=i386 syscall=open success=yes exit=3 a0=bfa1ec2a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4878 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.530:5395) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.530:5395) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.530:5395) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4879 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.550:5396) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.550:5396) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.550:5396) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4880 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.554:5397) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.554:5397) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.554:5397) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4881 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.562:5398) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.562:5398) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.562:5398) : arch=i386 syscall=open success=yes exit=3 a0=bfcb9ebc a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4881 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.566:5399) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:03.566:5399) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.566:5399) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1911 pid=4881 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.606:5400) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:03.606:5400) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.606:5400) : arch=i386 syscall=open success=yes exit=3 a0=bfeafc2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4880 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.630:5401) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.630:5401) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.630:5401) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4882 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.650:5402) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.650:5402) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.650:5402) : arch=i386 syscall=open success=yes exit=3 a0=bff7806c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4882 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.654:5403) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:03.654:5403) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.654:5403) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4882 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.701:5404) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.701:5404) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.701:5404) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4883 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.709:5405) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:03.709:5405) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.709:5405) : arch=i386 syscall=open success=yes exit=3 a0=bfb45c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4883 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.805:5406) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.805:5406) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.805:5406) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4884 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.849:5407) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:03.849:5407) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.849:5407) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.869:5408) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.869:5408) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.869:5408) : arch=i386 syscall=open success=yes exit=3 a0=bfbfda0c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4884 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.869:5409) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:03.869:5409) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.869:5409) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4884 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.921:5410) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:03.921:5410) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.921:5410) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.921:5411) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:03.921:5411) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.921:5411) : arch=i386 syscall=open success=yes exit=3 a0=bf82546c a1=8002 a2=0 a3=bf82546c items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.929:5412) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.929:5412) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.929:5412) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4886 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.937:5413) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:03.937:5413) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.937:5413) : arch=i386 syscall=open success=yes exit=4 a0=8120690 a1=4c002 a2=0 a3=81205e8 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.941:5414) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:03.941:5414) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.941:5414) : arch=i386 syscall=open success=yes exit=4 a0=8120be8 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.941:5415) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:03.941:5415) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.941:5415) : arch=i386 syscall=open success=yes exit=4 a0=8120910 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.945:5416) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:03.945:5416) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.945:5416) : arch=i386 syscall=open success=yes exit=6 a0=8120570 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.945:5417) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:03.945:5417) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.945:5417) : arch=i386 syscall=open success=yes exit=6 a0=8120728 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.949:5418) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.949:5418) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.949:5418) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4887 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.953:5419) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:03.953:5419) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.953:5419) : arch=i386 syscall=open success=yes exit=3 a0=bf910c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4886 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.957:5420) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:03.957:5420) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.957:5420) : arch=i386 syscall=open success=yes exit=3 a0=bfa9ef4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4887 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5421) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:03.981:5421) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5421) : arch=i386 syscall=open success=yes exit=6 a0=8120590 a1=4c002 a2=0 a3=8120480 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5422) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:03.981:5422) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5422) : arch=i386 syscall=open success=yes exit=6 a0=8120930 a1=4c002 a2=0 a3=8120738 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5423) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.981:5423) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5423) : arch=i386 syscall=open success=yes exit=6 a0=8120c08 a1=4c002 a2=0 a3=8120a10 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5424) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:03.981:5424) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5424) : arch=i386 syscall=open success=yes exit=6 a0=8120c28 a1=4c002 a2=0 a3=8120aa8 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5425) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:03.981:5425) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5425) : arch=i386 syscall=open success=yes exit=6 a0=81203a8 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5426) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:03.981:5426) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5426) : arch=i386 syscall=open success=yes exit=6 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5427) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:03.981:5427) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5427) : arch=i386 syscall=open success=yes exit=6 a0=8120c48 a1=4c002 a2=0 a3=8120b40 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5428) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:03.981:5428) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5428) : arch=i386 syscall=open success=yes exit=6 a0=8120950 a1=4c002 a2=0 a3=81207d0 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5429) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:03.981:5429) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5429) : arch=i386 syscall=open success=yes exit=6 a0=8120970 a1=4c002 a2=0 a3=8120868 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5430) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:03.981:5430) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5430) : arch=i386 syscall=open success=yes exit=6 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5431) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:03.981:5431) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5431) : arch=i386 syscall=open success=yes exit=6 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5432) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:03.981:5432) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5432) : arch=i386 syscall=open success=yes exit=6 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5433) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:03.981:5433) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5433) : arch=i386 syscall=open success=yes exit=6 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5434) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:03.981:5434) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5434) : arch=i386 syscall=open success=yes exit=6 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.981:5435) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:03.981:5435) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.981:5435) : arch=i386 syscall=open success=yes exit=6 a0=8120a00 a1=4c002 a2=0 a3=81203b8 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.985:5436) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:03.985:5436) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:03.985:5436) : arch=i386 syscall=open success=yes exit=6 a0=80efc43 a1=8000 a2=0 a3=20 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.985:5437) : item=0 name=/dev/.udev/db/block:ram1 inode=24852 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.985:5437) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.985:5437) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.989:5438) : item=1 name=/dev/.udev/watch/146 inode=24851 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:03.989:5438) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.989:5438) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.989:5438) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.993:5439) : item=0 name=/dev/.udev/db/block:ram2 inode=24793 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.993:5439) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.993:5439) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.993:5440) : item=1 name=/dev/.udev/watch/137 inode=24792 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:03.993:5440) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.993:5440) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.993:5440) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80793a0 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.997:5442) : item=0 name=/dev/.udev/db/block:ram5 inode=24904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.997:5442) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.997:5442) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807df48 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.997:5441) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:03.997:5441) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.997:5441) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4888 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:03.997:5443) : item=1 name=/dev/.udev/watch/154 inode=24897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:03.997:5443) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:03.997:5443) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:03.997:5443) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.001:5445) : item=1 name=/dev/.udev/watch/141 inode=24821 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.001:5445) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.001:5445) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.001:5445) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807df48 a3=bff1f71c items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.969:5504) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25014 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.969:5504) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.969:5504) : item=0 name=ram4 block/1:4 
>type=CWD msg=audit(04/20/10 11:58:04.969:5504) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.969:5504) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.005:5446) : item=0 name=/dev/.udev/db/block:ram7 inode=24811 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.005:5446) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.005:5446) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e7c0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.005:5447) : item=1 name=/dev/.udev/watch/140 inode=24810 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.005:5447) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.005:5447) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.005:5447) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80680f0 a3=bff1f71c items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.098:5448) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.098:5448) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.098:5448) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4744 pid=4892 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.057:5449) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.057:5449) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.057:5449) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4891 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.025:5450) : item=0 name=/dev/.udev/db/block:ram15 inode=24887 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.025:5450) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.025:5450) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80691c0 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.977:5507) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.977:5507) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.977:5507) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4749 pid=4906 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.106:5451) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.106:5451) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.106:5451) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4745 pid=4893 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.021:5452) : item=0 name=/dev/.udev/db/block:ram14 inode=24865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.021:5452) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.021:5452) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068d40 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.025:5453) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.025:5453) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.025:5453) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4890 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.481:5454) : item=1 name=/dev/.udev/watch/150 inode=24864 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.481:5454) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.481:5454) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.481:5454) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.021:5455) : item=0 name=/dev/.udev/db/block:ram13 inode=24858 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.021:5455) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.021:5455) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80688c0 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.009:5456) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.009:5456) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.009:5456) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4889 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.485:5457) : item=1 name=/dev/.udev/watch/147 inode=24855 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.485:5457) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.485:5457) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.485:5457) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.017:5458) : item=0 name=/dev/.udev/db/block:ram4 inode=24837 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.017:5458) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.017:5458) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807db10 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.497:5459) : item=1 name=/dev/.udev/watch/144 inode=24836 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.497:5459) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.497:5459) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.497:5459) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.009:5460) : item=0 name=/dev/.udev/db/block:ram9 inode=24848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.009:5460) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.009:5460) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f050 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.501:5461) : item=1 name=/dev/.udev/watch/145 inode=24847 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.501:5461) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.501:5461) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.501:5461) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.013:5462) : item=0 name=/dev/.udev/db/block:ram11 inode=24880 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.013:5462) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.013:5462) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f950 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.501:5463) : item=1 name=/dev/.udev/watch/149 inode=24879 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.501:5463) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.501:5463) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.501:5463) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.005:5464) : item=0 name=/dev/.udev/db/block:ram8 inode=24877 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.005:5464) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.005:5464) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807ed40 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.537:5465) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:04.537:5465) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.537:5465) : arch=i386 syscall=open success=yes exit=3 a0=bf815f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4744 pid=4892 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.529:5466) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:04.529:5466) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.529:5466) : arch=i386 syscall=open success=yes exit=3 a0=bfa9ef4b a1=8000 a2=0 a3=804f008 items=1 ppid=4745 pid=4893 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.509:5467) : item=0 name=/dev/.udev/watch/153 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.509:5467) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.509:5467) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.525:5468) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.525:5468) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.525:5468) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4759 pid=4900 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.521:5469) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.521:5469) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.521:5469) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4756 pid=4898 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.521:5470) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.521:5470) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.521:5470) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4750 pid=4899 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.521:5471) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.521:5471) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.521:5471) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4897 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.365:5472) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.365:5472) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.365:5472) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=4896 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.430:5473) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:04.430:5473) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.430:5473) : arch=i386 syscall=open success=yes exit=3 a0=bfda8f3e a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4888 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.377:5474) : item=1 name=/dev/mapper/system-home inode=24999 dev=00:0e mode=block,640 ouid=root ogid=root rdev=fd:00 
>type=PATH msg=audit(04/20/10 11:58:04.377:5474) : item=0 name=/dev/mapper/ inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.377:5474) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:04.377:5474) : arch=i386 syscall=mknod success=yes exit=0 a0=bf8242fc a1=61a0 a2=fd00 a3=fd00 items=2 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.665:5475) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.665:5475) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.665:5475) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4758 pid=4902 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.665:5476) : item=0 name=/dev/mapper/system-home inode=24999 dev=00:0e mode=block,640 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:04.665:5476) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:04.665:5476) : arch=i386 syscall=chown32 success=yes exit=0 a0=bf8242fc a1=0 a2=6 a3=fd00 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.665:5477) : item=0 name=/dev/mapper/system-home inode=24999 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:04.665:5477) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:04.665:5477) : arch=i386 syscall=open success=yes exit=3 a0=bf82429c a1=8000 a2=0 a3=bf82429c items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.665:5478) : item=0 name=/dev/mapper/system-home inode=24999 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:04.665:5478) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:04.665:5478) : arch=i386 syscall=open success=yes exit=3 a0=bf8242fc a1=8000 a2=0 a3=bf8242fc items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.669:5479) : item=1 name=/dev/system inode=25006 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.669:5479) : item=0 name=/dev/ inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.669:5479) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:04.669:5479) : arch=i386 syscall=mkdir success=yes exit=0 a0=bf82434c a1=1ff a2=8106ff4 a3=bf82434c items=2 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.693:5516) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:04.693:5516) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.693:5516) : arch=i386 syscall=open success=yes exit=3 a0=bfe1bf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4756 pid=4898 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.693:5517) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:04.693:5517) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.693:5517) : arch=i386 syscall=open success=yes exit=3 a0=bff8df46 a1=8000 a2=0 a3=804f008 items=1 ppid=4759 pid=4900 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.693:5480) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25008 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.693:5480) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.693:5480) : item=0 name=ram6 block/1:6 
>type=CWD msg=audit(04/20/10 11:58:04.693:5480) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.693:5480) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.533:5521) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:04.533:5521) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.533:5521) : arch=i386 syscall=open success=yes exit=3 a0=bfda8f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4890 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.977:5522) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:04.977:5522) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.977:5522) : arch=i386 syscall=open success=yes exit=3 a0=bfc0bf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4747 pid=4904 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.977:5525) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.977:5525) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.977:5525) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4757 pid=4905 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.945:5529) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25011 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.945:5529) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.945:5529) : item=0 name=ram1 block/1:1 
>type=CWD msg=audit(04/20/10 11:58:04.945:5529) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.945:5529) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.689:5481) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.689:5481) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.689:5481) : item=0 name=ram5 block/1:5 
>type=CWD msg=audit(04/20/10 11:58:04.689:5481) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.689:5481) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.681:5482) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:04.681:5482) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.681:5482) : arch=i386 syscall=open success=yes exit=3 a0=bf848f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4897 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.009:5483) : item=0 name=/dev/.udev/db/block:ram10 inode=24833 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.009:5483) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.009:5483) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f4d0 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.021:5484) : item=0 name=/dev/.udev/db/block:ram3 inode=24806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.021:5484) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.021:5484) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807d348 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.937:5485) : item=4 name=/dev/.udev/db/block:ram6 inode=25008 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.937:5485) : item=3 name=/dev/.udev/db/block:ram6 inode=24822 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.937:5485) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25008 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.937:5485) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.937:5485) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.937:5485) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.937:5485) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.937:5486) : item=0 name=/dev/block/1:6 inode=3887 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.937:5486) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.937:5486) : arch=i386 syscall=readlink success=yes exit=7 a0=8079bd8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.541:5487) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:04.541:5487) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.541:5487) : arch=i386 syscall=open success=yes exit=3 a0=bfe26f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4889 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.925:5488) : item=4 name=/dev/.udev/db/block:ram5 inode=25007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.925:5488) : item=3 name=/dev/.udev/db/block:ram5 inode=24904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.925:5488) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.925:5488) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.925:5488) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.925:5488) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.925:5488) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.925:5489) : item=1 name=/dev/.udev/watch/139 inode=24805 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.925:5489) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.925:5489) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.925:5489) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080a88 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.857:5490) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:04.857:5490) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.857:5490) : arch=i386 syscall=open success=yes exit=3 a0=bfe0c40c a1=8002 a2=0 a3=bfe0c40c items=1 ppid=4812 pid=4896 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.013:5491) : item=0 name=/dev/.udev/db/block:ram12 inode=24860 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.013:5491) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.013:5491) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068440 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.697:5492) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.697:5492) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.697:5492) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4903 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.953:5493) : item=1 name=/dev/.udev/watch/148 inode=24859 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.953:5493) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.953:5493) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.953:5493) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.697:5494) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.697:5494) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.697:5494) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4760 pid=4901 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.937:5495) : item=1 name=/dev/.udev/watch/152 inode=24876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.937:5495) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.937:5495) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.937:5495) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807e7c0 a3=bff1f71c items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.945:5496) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:04.945:5496) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.945:5496) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4747 pid=4904 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.857:5497) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.857:5497) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.857:5497) : arch=i386 syscall=open success=yes exit=3 a0=bff9fb5c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4891 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.701:5498) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:04.701:5498) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.701:5498) : arch=i386 syscall=open success=yes exit=3 a0=bfce9f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4758 pid=4902 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.685:5499) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:04.685:5499) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.685:5499) : arch=i386 syscall=open success=yes exit=3 a0=bfed7f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4750 pid=4899 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.973:5500) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25015 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.973:5500) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.973:5500) : item=0 name=ram13 block/1:13 
>type=CWD msg=audit(04/20/10 11:58:04.973:5500) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.973:5500) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.001:5444) : item=0 name=/dev/.udev/db/block:ram6 inode=24822 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:04.001:5444) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.001:5444) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e370 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:04.973:5501) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25016 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.973:5501) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:04.973:5501) : item=0 name=ram9 block/1:9 
>type=CWD msg=audit(04/20/10 11:58:04.973:5501) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:04.973:5501) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.025:5503) : item=4 name=/dev/.udev/db/block:ram9 inode=25016 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.025:5503) : item=3 name=/dev/.udev/db/block:ram9 inode=24848 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.025:5503) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25016 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.025:5503) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.025:5503) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.025:5503) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.025:5503) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.029:5505) : item=0 name=/dev/.udev/watch/166 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.029:5505) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.029:5505) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80680e0 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.033:5506) : item=0 name=/dev/block/1:5 inode=3897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.033:5506) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.033:5506) : arch=i386 syscall=readlink success=yes exit=7 a0=8079c20 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5508) : item=0 name=/dev/block/1:13 inode=3939 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5508) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5508) : arch=i386 syscall=readlink success=yes exit=8 a0=8080958 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5509) : item=0 name=/dev/.udev/watch/167 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5509) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5509) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068440 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5510) : item=2 name=/dev/.udev/watch/167 inode=25027 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5510) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5510) : item=0 name=/devices/virtual/block/ram13 
>type=CWD msg=audit(04/20/10 11:58:05.085:5510) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5510) : arch=i386 syscall=symlink success=yes exit=0 a0=8068564 a1=bff1fbfc a2=8068008 a3=8068440 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5511) : item=1 name=/dev/.udev/db/block:ram13.tmp inode=25028 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5511) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5511) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5511) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8069c68 items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5512) : item=4 name=/dev/.udev/db/block:ram13 inode=25028 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5512) : item=3 name=/dev/.udev/db/block:ram13 inode=25015 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5512) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25028 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5512) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5512) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5512) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5512) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5513) : item=2 name=/dev/system/home inode=25029 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5513) : item=1 name=/dev/system/ inode=25006 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5513) : item=0 name=/dev/mapper/system-home 
>type=CWD msg=audit(04/20/10 11:58:05.085:5513) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5513) : arch=i386 syscall=symlink success=yes exit=0 a0=bf82334c a1=bf82434c a2=8106ff4 a3=bf82134c items=3 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5514) : item=0 name=/dev/system/home inode=24999 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5514) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5514) : arch=i386 syscall=open success=yes exit=3 a0=8120d38 a1=4c002 a2=0 a3=8120cb0 items=1 ppid=4147 pid=4885 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5515) : item=1 name=/dev/.udev/watch/143 inode=24832 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5515) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5515) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5515) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5518) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:05.085:5518) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5518) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4755 pid=4907 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5519) : item=0 name=/dev/block/1:9 inode=3940 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5519) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5519) : arch=i386 syscall=readlink success=yes exit=7 a0=80807f8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.458:5520) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:05.458:5520) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.458:5520) : arch=i386 syscall=open success=yes exit=3 a0=bfe60f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4755 pid=4907 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.518:5523) : item=4 name=/dev/.udev/db/block:ram4 inode=25014 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.518:5523) : item=3 name=/dev/.udev/db/block:ram4 inode=24837 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.518:5523) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25014 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.518:5523) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.518:5523) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.518:5523) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.518:5523) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.522:5524) : item=0 name=/dev/block/1:4 inode=3922 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.522:5524) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.522:5524) : arch=i386 syscall=readlink success=yes exit=7 a0=8080000 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.522:5526) : item=0 name=/dev/.udev/watch/168 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.522:5526) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.522:5526) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807d700 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5527) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5527) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5527) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4891 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.454:5528) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25033 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.454:5528) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.454:5528) : item=0 name=ram14 block/1:14 
>type=CWD msg=audit(04/20/10 11:58:05.454:5528) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.454:5528) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.538:5530) : item=2 name=/dev/.udev/watch/168 inode=25042 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.538:5530) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.538:5530) : item=0 name=/devices/virtual/block/ram4 
>type=CWD msg=audit(04/20/10 11:58:05.538:5530) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.538:5530) : arch=i386 syscall=symlink success=yes exit=0 a0=807952c a1=bff1fbfc a2=8068008 a3=807d700 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.538:5531) : item=1 name=/dev/.udev/db/block:ram4.tmp inode=25043 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.538:5531) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.538:5531) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.538:5531) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807eb18 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.077:5532) : item=2 name=/dev/.udev/watch/166 inode=25024 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.077:5532) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.077:5532) : item=0 name=/devices/virtual/block/ram6 
>type=CWD msg=audit(04/20/10 11:58:05.077:5532) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.077:5532) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=80680e0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.542:5533) : item=4 name=/dev/.udev/db/block:ram4 inode=25043 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.542:5533) : item=3 name=/dev/.udev/db/block:ram4 inode=25014 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.542:5533) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25043 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.542:5533) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.542:5533) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.542:5533) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.542:5533) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.593:5534) : item=0 name=/dev/.udev/watch/169 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.593:5534) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.593:5534) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807db20 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.593:5535) : item=2 name=/dev/.udev/watch/169 inode=25047 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.593:5535) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.593:5535) : item=0 name=/devices/virtual/block/ram5 
>type=CWD msg=audit(04/20/10 11:58:05.593:5535) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.593:5535) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=807db20 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.593:5536) : item=1 name=/dev/.udev/db/block:ram5.tmp inode=25048 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.593:5536) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.593:5536) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.593:5536) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef50 items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.593:5537) : item=4 name=/dev/.udev/db/block:ram5 inode=25048 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.593:5537) : item=3 name=/dev/.udev/db/block:ram5 inode=25007 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.593:5537) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25048 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.593:5537) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.593:5537) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.593:5537) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.593:5537) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.534:5538) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25040 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.534:5538) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.534:5538) : item=0 name=ram10 block/1:10 
>type=CWD msg=audit(04/20/10 11:58:05.534:5538) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.534:5538) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.597:5539) : item=4 name=/dev/.udev/db/block:ram10 inode=25040 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5539) : item=3 name=/dev/.udev/db/block:ram10 inode=24833 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5539) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25040 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5539) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5539) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.597:5539) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.597:5539) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.597:5540) : item=0 name=/dev/block/1:10 inode=3932 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.597:5540) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.597:5540) : arch=i386 syscall=readlink success=yes exit=8 a0=8080958 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.597:5541) : item=0 name=/dev/.udev/watch/170 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.597:5541) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.597:5541) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f050 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.597:5542) : item=2 name=/dev/.udev/watch/170 inode=25051 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5542) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5542) : item=0 name=/devices/virtual/block/ram10 
>type=CWD msg=audit(04/20/10 11:58:05.597:5542) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.597:5542) : arch=i386 syscall=symlink success=yes exit=0 a0=807f174 a1=bff1fbfc a2=8068008 a3=807f050 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.597:5543) : item=1 name=/dev/.udev/db/block:ram10.tmp inode=25052 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5543) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.597:5543) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.597:5543) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f4d0 items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.597:5544) : item=4 name=/dev/.udev/db/block:ram10 inode=25052 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5544) : item=3 name=/dev/.udev/db/block:ram10 inode=25040 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5544) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25052 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5544) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.597:5544) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.597:5544) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.597:5544) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.025:5502) : item=4 name=/dev/.udev/db/block:ram13 inode=25015 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.025:5502) : item=3 name=/dev/.udev/db/block:ram13 inode=24858 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.025:5502) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25015 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.025:5502) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.025:5502) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.025:5502) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.025:5502) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.558:5545) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:05.558:5545) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.558:5545) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4909 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.487:5546) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:05.487:5546) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:05.487:5546) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.621:5547) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25054 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.621:5547) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.621:5547) : item=0 name=ram11 block/1:11 
>type=CWD msg=audit(04/20/10 11:58:05.621:5547) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.621:5547) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.633:5548) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:05.633:5548) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.633:5548) : arch=i386 syscall=open success=yes exit=3 a0=bfa48f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4909 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.625:5549) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:05.625:5549) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.625:5549) : arch=i386 syscall=open success=yes exit=3 a0=bfa08f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4749 pid=4906 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.721:5550) : item=4 name=/dev/.udev/db/block:ram14 inode=25033 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5550) : item=3 name=/dev/.udev/db/block:ram14 inode=24865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5550) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25033 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5550) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5550) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.721:5550) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.721:5550) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.721:5551) : item=0 name=/dev/block/1:14 inode=3912 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.721:5551) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.721:5551) : arch=i386 syscall=readlink success=yes exit=8 a0=8080000 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.721:5552) : item=0 name=/dev/.udev/watch/172 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.721:5552) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.721:5552) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80688c0 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.721:5553) : item=2 name=/dev/.udev/watch/172 inode=25063 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5553) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5553) : item=0 name=/devices/virtual/block/ram14 
>type=CWD msg=audit(04/20/10 11:58:05.721:5553) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.721:5553) : arch=i386 syscall=symlink success=yes exit=0 a0=8068a3c a1=bff1fbfc a2=8068008 a3=80688c0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.721:5554) : item=1 name=/dev/.udev/db/block:ram14.tmp inode=25064 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5554) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.721:5554) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.721:5554) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a0e8 items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.721:5555) : item=4 name=/dev/.udev/db/block:ram14 inode=25064 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5555) : item=3 name=/dev/.udev/db/block:ram14 inode=25033 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5555) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25064 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5555) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.721:5555) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.721:5555) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.721:5555) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.725:5556) : item=4 name=/dev/.udev/db/block:ram1 inode=25011 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5556) : item=3 name=/dev/.udev/db/block:ram1 inode=24852 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5556) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25011 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5556) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5556) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.725:5556) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.725:5556) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.725:5557) : item=0 name=/dev/block/1:1 inode=3882 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.725:5557) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.725:5557) : arch=i386 syscall=readlink success=yes exit=7 a0=80807f8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.725:5558) : item=0 name=/dev/.udev/watch/173 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.725:5558) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.725:5558) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.725:5559) : item=2 name=/dev/.udev/watch/173 inode=25067 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5559) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5559) : item=0 name=/devices/virtual/block/ram1 
>type=CWD msg=audit(04/20/10 11:58:05.725:5559) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.725:5559) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.725:5560) : item=1 name=/dev/.udev/db/block:ram1.tmp inode=25068 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5560) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.725:5560) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.725:5560) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.725:5561) : item=4 name=/dev/.udev/db/block:ram1 inode=25068 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5561) : item=3 name=/dev/.udev/db/block:ram1 inode=25011 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5561) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25068 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5561) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.725:5561) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.725:5561) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.725:5561) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.542:5562) : item=1 name=/dev/.udev/db/block:ram6.tmp inode=25044 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.542:5562) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.542:5562) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.542:5562) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f378 items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.729:5563) : item=4 name=/dev/.udev/db/block:ram6 inode=25044 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.729:5563) : item=3 name=/dev/.udev/db/block:ram6 inode=25008 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.729:5563) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25044 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.729:5563) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.729:5563) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.729:5563) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.729:5563) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.530:5564) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25039 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.530:5564) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.530:5564) : item=0 name=ram7 block/1:7 
>type=CWD msg=audit(04/20/10 11:58:05.530:5564) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.530:5564) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.733:5565) : item=4 name=/dev/.udev/db/block:ram7 inode=25039 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.733:5565) : item=3 name=/dev/.udev/db/block:ram7 inode=24811 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.733:5565) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25039 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.733:5565) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.733:5565) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.733:5565) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.733:5565) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.733:5566) : item=0 name=/dev/block/1:7 inode=3917 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.733:5566) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.733:5566) : arch=i386 syscall=readlink success=yes exit=7 a0=8079c20 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.733:5567) : item=0 name=/dev/.udev/watch/174 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.733:5567) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.733:5567) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e370 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.733:5568) : item=2 name=/dev/.udev/watch/174 inode=25071 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.733:5568) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.733:5568) : item=0 name=/devices/virtual/block/ram7 
>type=CWD msg=audit(04/20/10 11:58:05.733:5568) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.733:5568) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=807e370 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.733:5569) : item=1 name=/dev/.udev/db/block:ram7.tmp inode=25072 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.733:5569) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.733:5569) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.733:5569) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f7c8 items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.534:5570) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25041 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.534:5570) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.534:5570) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:58:05.534:5570) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.534:5570) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.661:5571) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:05.661:5571) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.661:5571) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4910 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.085:5572) : item=1 name=/dev/.tmp-block-253:0 inode=25031 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:00 
>type=PATH msg=audit(04/20/10 11:58:05.085:5572) : item=0 name=/dev/ inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.085:5572) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.085:5572) : arch=i386 syscall=mknod success=yes exit=0 a0=80840e0 a1=6180 a2=fd00 a3=0 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.737:5573) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25073 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.737:5573) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.737:5573) : item=0 name=ram8 block/1:8 
>type=CWD msg=audit(04/20/10 11:58:05.737:5573) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.737:5573) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.793:5574) : item=4 name=/dev/.udev/db/block:ram2 inode=25041 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.793:5574) : item=3 name=/dev/.udev/db/block:ram2 inode=24793 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.793:5574) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25041 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.793:5574) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.793:5574) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.793:5574) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.793:5574) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.793:5575) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.793:5575) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.793:5575) : arch=i386 syscall=readlink success=yes exit=7 a0=807c850 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.797:5576) : item=0 name=/dev/.udev/watch/175 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.797:5576) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.797:5576) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080af8 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.797:5577) : item=2 name=/dev/.udev/watch/175 inode=25076 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.797:5577) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.797:5577) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:58:05.797:5577) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.797:5577) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=8080af8 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.797:5578) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=25077 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.797:5578) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.797:5578) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.797:5578) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.797:5579) : item=4 name=/dev/.udev/db/block:ram2 inode=25077 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.797:5579) : item=3 name=/dev/.udev/db/block:ram2 inode=25041 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.797:5579) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25077 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.797:5579) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.797:5579) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.797:5579) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.797:5579) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.797:5580) : item=0 name=/dev/.tmp-block-253:0 inode=25031 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:05.797:5580) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.797:5580) : arch=i386 syscall=chmod success=yes exit=0 a0=80840e0 a1=6180 a2=8068008 a3=0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.797:5581) : item=0 name=/dev/.tmp-block-253:0 inode=25031 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:05.797:5581) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.797:5581) : arch=i386 syscall=chown32 success=yes exit=0 a0=80840e0 a1=0 a2=0 a3=0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.805:5582) : item=4 name=/dev/.udev/db/block:ram8 inode=25073 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.805:5582) : item=3 name=/dev/.udev/db/block:ram8 inode=24877 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.805:5582) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25073 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.805:5582) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.805:5582) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.805:5582) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.805:5582) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.805:5583) : item=0 name=/dev/block/1:8 inode=3952 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.805:5583) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.805:5583) : arch=i386 syscall=readlink success=yes exit=7 a0=80807f8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.809:5584) : item=0 name=/dev/.udev/watch/176 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.809:5584) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.809:5584) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eb98 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.809:5585) : item=2 name=/dev/.udev/watch/176 inode=25081 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.809:5585) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.809:5585) : item=0 name=/devices/virtual/block/ram8 
>type=CWD msg=audit(04/20/10 11:58:05.809:5585) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.809:5585) : arch=i386 syscall=symlink success=yes exit=0 a0=807e894 a1=bff1fbfc a2=8068008 a3=807eb98 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.809:5586) : item=1 name=/dev/.udev/db/block:ram8.tmp inode=25082 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.809:5586) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.809:5586) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.809:5586) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ed40 items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.809:5587) : item=4 name=/dev/.udev/db/block:ram7 inode=25072 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.809:5587) : item=3 name=/dev/.udev/db/block:ram7 inode=25039 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.809:5587) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25072 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.809:5587) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.809:5587) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.809:5587) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.809:5587) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.785:5588) : item=4 name=/dev/.udev/db/block:ram11 inode=25054 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.785:5588) : item=3 name=/dev/.udev/db/block:ram11 inode=24880 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.785:5588) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25054 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.785:5588) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.785:5588) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.785:5588) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.785:5588) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.813:5589) : item=0 name=/dev/block/1:11 inode=3907 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.813:5589) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.813:5589) : arch=i386 syscall=readlink success=yes exit=8 a0=8079338 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.813:5590) : item=0 name=/dev/.udev/watch/177 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.813:5590) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.813:5590) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f4d0 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.813:5591) : item=2 name=/dev/.udev/watch/177 inode=25085 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.813:5591) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.813:5591) : item=0 name=/devices/virtual/block/ram11 
>type=CWD msg=audit(04/20/10 11:58:05.813:5591) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.813:5591) : arch=i386 syscall=symlink success=yes exit=0 a0=807f5f4 a1=bff1fbfc a2=8068008 a3=807f4d0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.829:5592) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25088 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.829:5592) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.829:5592) : item=0 name=ram3 block/1:3 
>type=CWD msg=audit(04/20/10 11:58:05.829:5592) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.829:5592) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.901:5593) : item=4 name=/dev/.udev/db/block:ram3 inode=25088 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5593) : item=3 name=/dev/.udev/db/block:ram3 inode=24806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5593) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25088 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5593) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5593) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.901:5593) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.901:5593) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.901:5594) : item=0 name=/dev/block/1:3 inode=3947 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.901:5594) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.901:5594) : arch=i386 syscall=readlink success=yes exit=7 a0=8079260 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.901:5595) : item=0 name=/dev/.udev/watch/179 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.901:5595) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.901:5595) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.901:5596) : item=2 name=/dev/.udev/watch/179 inode=25092 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5596) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5596) : item=0 name=/devices/virtual/block/ram3 
>type=CWD msg=audit(04/20/10 11:58:05.901:5596) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.901:5596) : arch=i386 syscall=symlink success=yes exit=0 a0=807952c a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.901:5597) : item=1 name=/dev/.udev/db/block:ram3.tmp inode=25093 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5597) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.901:5597) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.901:5597) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e710 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.901:5598) : item=4 name=/dev/.udev/db/block:ram3 inode=25093 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5598) : item=3 name=/dev/.udev/db/block:ram3 inode=25088 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5598) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25093 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5598) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.901:5598) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.901:5598) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.901:5598) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.821:5599) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:05.821:5599) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.821:5599) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=4911 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.745:5600) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:05.745:5600) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.745:5600) : arch=i386 syscall=open success=yes exit=3 a0=bf902f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4760 pid=4901 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.909:5601) : item=1 name=/dev/.udev/db/block:ram11.tmp inode=25094 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5601) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.909:5601) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.909:5601) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f950 items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.909:5602) : item=4 name=/dev/.udev/db/block:ram11 inode=25094 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5602) : item=3 name=/dev/.udev/db/block:ram11 inode=25054 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5602) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25094 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5602) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5602) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.909:5602) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.909:5602) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.821:5603) : item=0 name=/dev/.udev/watch/178 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.821:5603) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.821:5603) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.909:5604) : item=2 name=/dev/.udev/watch/178 inode=25095 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5604) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5604) : item=0 name=/devices/virtual/block/ram9 
>type=CWD msg=audit(04/20/10 11:58:05.909:5604) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.909:5604) : arch=i386 syscall=symlink success=yes exit=0 a0=8080ab4 a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.909:5605) : item=1 name=/dev/.udev/db/block:ram9.tmp inode=25096 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5605) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.909:5605) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.909:5605) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f050 items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.909:5606) : item=4 name=/dev/.udev/db/block:ram9 inode=25096 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5606) : item=3 name=/dev/.udev/db/block:ram9 inode=25016 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5606) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25096 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5606) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5606) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.909:5606) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.909:5606) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.881:5607) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.881:5607) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:05.881:5607) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.829:5608) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:05.829:5608) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.829:5608) : arch=i386 syscall=open success=yes exit=3 a0=bf94ef46 a1=8000 a2=0 a3=804f008 items=1 ppid=4757 pid=4905 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.825:5609) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:05.825:5609) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.825:5609) : arch=i386 syscall=open success=yes exit=3 a0=bfa36c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4910 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.909:5610) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25097 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5610) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.909:5610) : item=0 name=ram15 block/1:15 
>type=CWD msg=audit(04/20/10 11:58:05.909:5610) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.909:5610) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.821:5611) : item=4 name=/dev/.udev/db/block:ram8 inode=25082 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.821:5611) : item=3 name=/dev/.udev/db/block:ram8 inode=25073 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.821:5611) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25082 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.821:5611) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.821:5611) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.821:5611) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.821:5611) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.913:5612) : item=0 name=/dev/.tmp-block-253:0 inode=25031 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:05.913:5612) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.913:5612) : arch=i386 syscall=open success=yes exit=3 a0=bf90ddb8 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=4911 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.929:5613) : item=4 name=/dev/.udev/db/block:ram15 inode=25097 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.929:5613) : item=3 name=/dev/.udev/db/block:ram15 inode=24887 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.929:5613) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25097 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.929:5613) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.929:5613) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.929:5613) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.929:5613) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.933:5614) : item=0 name=/dev/block/1:15 inode=3927 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.933:5614) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.933:5614) : arch=i386 syscall=readlink success=yes exit=8 a0=807c850 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.941:5615) : item=0 name=/dev/.udev/watch/180 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.941:5615) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.941:5615) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068d40 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.945:5616) : item=2 name=/dev/.udev/watch/180 inode=25100 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.945:5616) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.945:5616) : item=0 name=/devices/virtual/block/ram15 
>type=CWD msg=audit(04/20/10 11:58:05.945:5616) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.945:5616) : arch=i386 syscall=symlink success=yes exit=0 a0=8068e64 a1=bff1fbfc a2=8068008 a3=8068d40 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.953:5617) : item=1 name=/dev/.udev/db/block:ram15.tmp inode=25101 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.953:5617) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.953:5617) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.953:5617) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a568 items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.957:5618) : item=4 name=/dev/.udev/db/block:ram15 inode=25101 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.957:5618) : item=3 name=/dev/.udev/db/block:ram15 inode=25097 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.957:5618) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25101 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.957:5618) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.957:5618) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.957:5618) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.957:5618) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.966:5619) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25102 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.966:5619) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.966:5619) : item=0 name=ram12 block/1:12 
>type=CWD msg=audit(04/20/10 11:58:05.966:5619) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.966:5619) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.966:5620) : item=4 name=/dev/.udev/db/block:ram12 inode=25102 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.966:5620) : item=3 name=/dev/.udev/db/block:ram12 inode=24860 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.966:5620) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25102 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.966:5620) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.966:5620) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.966:5620) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.966:5620) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.974:5621) : item=0 name=/dev/block/1:12 inode=3902 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.974:5621) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.974:5621) : arch=i386 syscall=readlink success=yes exit=8 a0=8079a28 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.974:5622) : item=0 name=/dev/.udev/watch/181 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.974:5622) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.974:5622) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f950 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.974:5623) : item=2 name=/dev/.udev/watch/181 inode=25105 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.974:5623) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.974:5623) : item=0 name=/devices/virtual/block/ram12 
>type=CWD msg=audit(04/20/10 11:58:05.974:5623) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.974:5623) : arch=i386 syscall=symlink success=yes exit=0 a0=807fa74 a1=bff1fbfc a2=8068008 a3=807f950 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.974:5624) : item=1 name=/dev/.udev/db/block:ram12.tmp inode=25106 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.974:5624) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.974:5624) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.974:5624) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=80697e8 items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.974:5625) : item=4 name=/dev/.udev/db/block:ram12 inode=25106 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.974:5625) : item=3 name=/dev/.udev/db/block:ram12 inode=25102 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.974:5625) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25106 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.974:5625) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:05.974:5625) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.974:5625) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:05.974:5625) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:05.997:5626) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:05.997:5626) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:05.997:5626) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.025:5628) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.025:5628) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.025:5628) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4913 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.049:5629) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.049:5629) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.049:5629) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.061:5630) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:06.061:5630) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.061:5630) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4812 pid=4912 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.069:5631) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.069:5631) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.069:5631) : arch=i386 syscall=open success=yes exit=3 a0=bfe6ebac a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4913 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.073:5632) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:06.073:5632) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.073:5632) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4913 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.089:5633) : item=0 name=/dev/.tmp-block-253:0 inode=25031 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:06.089:5633) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.089:5633) : arch=i386 syscall=chown32 success=yes exit=0 a0=80840e0 a1=0 a2=0 a3=80840e0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.089:5634) : item=0 name=/dev/.tmp-block-253:0 inode=25031 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:06.089:5634) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.089:5634) : arch=i386 syscall=chmod success=yes exit=0 a0=80840e0 a1=0 a2=8066ff4 a3=80840e0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.089:5635) : item=1 name=/dev/.tmp-block-253:0 inode=25031 dev=00:0e mode=block,000 ouid=root ogid=root rdev=fd:00 
>type=PATH msg=audit(04/20/10 11:58:06.089:5635) : item=0 name=/dev/ inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.089:5635) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.089:5635) : arch=i386 syscall=unlink success=yes exit=0 a0=80840e0 a1=0 a2=8066ff4 a3=80840e0 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.093:5636) : item=1 name=/dev/.udev/db/block:dm-0.tmp inode=25122 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:06.093:5636) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.093:5636) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.093:5636) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=8085240 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.093:5637) : item=3 name=/dev/.udev/db/block:dm-0 inode=25122 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:06.093:5637) : item=2 name=/dev/.udev/db/block:dm-0.tmp inode=25122 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:06.093:5637) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:06.093:5637) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.093:5637) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.093:5637) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=4 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.101:5638) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.101:5638) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.101:5638) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.105:5639) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.105:5639) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.105:5639) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4914 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.117:5640) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.117:5640) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.117:5640) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4915 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.121:5641) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:06.121:5641) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.121:5641) : arch=i386 syscall=open success=yes exit=3 a0=bff61c5c a1=8002 a2=0 a3=bff61c5c items=1 ppid=1911 pid=4914 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.133:5642) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.133:5642) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.133:5642) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4916 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.141:5643) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.141:5643) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.141:5643) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4917 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.145:5644) : item=0 name=/dev/.tmp-block-253:0 inode=25127 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:06.145:5644) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.145:5644) : arch=i386 syscall=open success=yes exit=3 a0=bfd4bd4b a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4917 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.149:5645) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.149:5645) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.149:5645) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.161:5646) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.161:5646) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.161:5646) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4918 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.185:5647) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:06.185:5647) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.185:5647) : arch=i386 syscall=open success=yes exit=3 a0=bffc3c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4915 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.202:5648) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.202:5648) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.202:5648) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.202:5649) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.202:5649) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.202:5649) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4919 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.241:5650) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:06.241:5650) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.241:5650) : arch=i386 syscall=open success=yes exit=3 a0=bff9489c a1=8002 a2=0 a3=bff9489c items=1 ppid=1911 pid=4918 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.249:5651) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.249:5651) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.249:5651) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4920 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.253:5652) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.253:5652) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.253:5652) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.257:5653) : item=0 name=/dev/.tmp-block-253:0 inode=25127 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:06.257:5653) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.257:5653) : arch=i386 syscall=open success=yes exit=3 a0=bfe82d3a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4920 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.265:5654) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.265:5654) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.265:5654) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4921 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.301:5655) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.301:5655) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.301:5655) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.313:5656) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.313:5656) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.313:5656) : arch=i386 syscall=open success=yes exit=3 a0=bfedf40c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4919 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.317:5657) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:06.317:5657) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.317:5657) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4919 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.341:5658) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:06.341:5658) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.341:5658) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=1911 pid=4921 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.353:5659) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.353:5659) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.353:5659) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.373:5660) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.373:5660) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.373:5660) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4923 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.393:5661) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.393:5661) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.393:5661) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4922 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.405:5662) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:06.405:5662) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.405:5662) : arch=i386 syscall=open success=yes exit=3 a0=bfdefc2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4922 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.405:5663) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.405:5663) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.405:5663) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.433:5664) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.433:5664) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.433:5664) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4924 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.453:5665) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.453:5665) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.453:5665) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.457:5666) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.457:5666) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.457:5666) : arch=i386 syscall=open success=yes exit=3 a0=bfcfc24c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4924 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.457:5667) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:06.457:5667) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.457:5667) : arch=i386 syscall=open success=yes exit=3 a0=bfd987fc a1=8002 a2=0 a3=bfd987fc items=1 ppid=1911 pid=4923 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-dm-expor exe=/lib/udev/udisks-dm-export key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.461:5668) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:06.461:5668) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.461:5668) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4924 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.469:5669) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.469:5669) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.469:5669) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4925 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.501:5670) : item=0 name=/dev/.udev/db/block:dm-0 inode=25174 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.501:5670) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:58:06.501:5670) : arch=i386 syscall=open success=yes exit=5 a0=bfae2c7c a1=8000 a2=1b6 a3=806c338 items=1 ppid=4072 pid=4111 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.505:5671) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.505:5671) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.505:5671) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.525:5672) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.525:5672) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.525:5672) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4926 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.537:5673) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:06.537:5673) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.537:5673) : arch=i386 syscall=open success=yes exit=3 a0=bfe36c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4926 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.557:5674) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.557:5674) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.557:5674) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.557:5675) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.557:5675) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.557:5675) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4927 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.577:5676) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.577:5676) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.577:5676) : arch=i386 syscall=open success=yes exit=3 a0=bfe5296c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4927 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.577:5677) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:06.577:5677) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.577:5677) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4927 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.597:5678) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.597:5678) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.597:5678) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4928 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.605:5679) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:06.605:5679) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.605:5679) : arch=i386 syscall=open success=yes exit=3 a0=bff2fc2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4928 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.605:5680) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.605:5680) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.605:5680) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.658:5681) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.658:5681) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.658:5681) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.709:5682) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.709:5682) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.709:5682) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4929 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.709:5683) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.709:5683) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.709:5683) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.762:5684) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.762:5684) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.762:5684) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.769:5685) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.769:5685) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.769:5685) : arch=i386 syscall=open success=yes exit=3 a0=bfd1e2cc a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4929 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.773:5686) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:06.773:5686) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.773:5686) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=4929 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.809:5687) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.809:5687) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.809:5687) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.862:5688) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.862:5688) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.862:5688) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.913:5689) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.913:5689) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.913:5689) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.964:5690) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:06.964:5690) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:06.964:5690) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:06.021:5627) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:06.021:5627) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:06.021:5627) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=4912 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.013:5692) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.013:5692) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.013:5692) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.041:5693) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.041:5693) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.041:5693) : arch=i386 syscall=open success=yes exit=3 a0=bfeb3f1b a1=8800 a2=0 a3=bfeb3f1b items=1 ppid=1510 pid=4930 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.045:5694) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.045:5694) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.045:5694) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4931 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.065:5695) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.065:5695) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.065:5695) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.073:5696) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.073:5696) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.073:5696) : arch=i386 syscall=open success=yes exit=3 a0=bfb36afc a1=8800 a2=0 a3=bfb36eb4 items=1 ppid=1510 pid=4931 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.073:5697) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.073:5697) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.073:5697) : arch=i386 syscall=open success=yes exit=3 a0=bfb36afc a1=8800 a2=0 a3=8052008 items=1 ppid=1510 pid=4931 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.077:5698) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.077:5698) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.077:5698) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4932 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.089:5699) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.089:5699) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.089:5699) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4933 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.097:5700) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.097:5700) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.097:5700) : arch=i386 syscall=open success=yes exit=3 a0=bf8bec69 a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4933 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.109:5701) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.109:5701) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.109:5701) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4934 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.113:5702) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.113:5702) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.113:5702) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.117:5703) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.117:5703) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.117:5703) : arch=i386 syscall=open success=yes exit=4 a0=bfd43c4d a1=8000 a2=0 a3=1 items=1 ppid=1510 pid=4934 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.121:5704) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.121:5704) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.121:5704) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4935 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.165:5705) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.165:5705) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.165:5705) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.217:5706) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.217:5706) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.217:5706) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.265:5707) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.265:5707) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.265:5707) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.298:5708) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.298:5708) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.298:5708) : arch=i386 syscall=open success=yes exit=3 a0=bf9263dc a1=8000 a2=1b6 a3=8055158 items=1 ppid=1510 pid=4935 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.298:5709) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.298:5709) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.298:5709) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1510 pid=4935 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.306:5710) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.306:5710) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.306:5710) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4936 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.314:5711) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.314:5711) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.314:5711) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1510 pid=4936 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.318:5712) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.318:5712) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.318:5712) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.318:5713) : item=0 name=/dev/.udev/db/block:sda inode=24870 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.318:5713) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.318:5713) : arch=i386 syscall=open success=yes exit=4 a0=bf86267c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1510 pid=4936 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.366:5714) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.366:5714) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.366:5714) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.370:5715) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.370:5715) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.370:5715) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4937 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.378:5716) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:07.378:5716) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.378:5716) : arch=i386 syscall=open success=yes exit=3 a0=bfe6dc2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4937 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.386:5717) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.386:5717) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.386:5717) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4938 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.394:5718) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.394:5718) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.394:5718) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4939 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.418:5719) : item=0 name=/dev/.udev/db/block:sda inode=25209 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.418:5719) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.418:5719) : arch=i386 syscall=open success=yes exit=3 a0=bfab802c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=4939 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.418:5720) : item=0 name=/dev/.udev/queue.bin inode=24119 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.418:5720) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.418:5720) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.418:5721) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.418:5721) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.418:5721) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1510 pid=4939 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.469:5722) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:07.469:5722) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.469:5722) : arch=i386 syscall=open success=yes exit=3 a0=bf8fec8c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4908 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.510:5723) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:07.510:5723) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.510:5723) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.590:5724) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:07.590:5724) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.590:5724) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.594:5725) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:07.594:5725) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.594:5725) : arch=i386 syscall=open success=yes exit=4 a0=8120690 a1=4c000 a2=0 a3=81205e8 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.594:5726) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:07.594:5726) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.594:5726) : arch=i386 syscall=open success=yes exit=4 a0=8120be8 a1=4c000 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.594:5727) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:07.594:5727) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.594:5727) : arch=i386 syscall=open success=yes exit=4 a0=8120910 a1=4c000 a2=0 a3=811fd98 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5728) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:07.598:5728) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5728) : arch=i386 syscall=open success=yes exit=5 a0=8120570 a1=4c000 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5729) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:07.598:5729) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5729) : arch=i386 syscall=open success=yes exit=5 a0=8120728 a1=4c000 a2=0 a3=811fc40 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5730) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:07.598:5730) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5730) : arch=i386 syscall=open success=yes exit=5 a0=8120590 a1=4c000 a2=0 a3=8120480 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5731) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:07.598:5731) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5731) : arch=i386 syscall=open success=yes exit=5 a0=8120930 a1=4c000 a2=0 a3=8120738 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5732) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.598:5732) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5732) : arch=i386 syscall=open success=yes exit=5 a0=8120c08 a1=4c000 a2=0 a3=8120a10 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5733) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:07.598:5733) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5733) : arch=i386 syscall=open success=yes exit=5 a0=8120c28 a1=4c000 a2=0 a3=8120aa8 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5734) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:07.598:5734) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5734) : arch=i386 syscall=open success=yes exit=5 a0=81203a8 a1=4c000 a2=0 a3=81202a8 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5735) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:07.598:5735) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5735) : arch=i386 syscall=open success=yes exit=5 a0=8120198 a1=4c000 a2=0 a3=81200a8 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5736) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:07.598:5736) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5736) : arch=i386 syscall=open success=yes exit=5 a0=8120c48 a1=4c000 a2=0 a3=8120b40 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5737) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:07.598:5737) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5737) : arch=i386 syscall=open success=yes exit=5 a0=8120950 a1=4c000 a2=0 a3=81207d0 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5738) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:07.598:5738) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5738) : arch=i386 syscall=open success=yes exit=5 a0=8120970 a1=4c000 a2=0 a3=8120868 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5739) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:07.598:5739) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5739) : arch=i386 syscall=open success=yes exit=5 a0=811ff88 a1=4c000 a2=0 a3=811ff00 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5740) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:07.598:5740) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5740) : arch=i386 syscall=open success=yes exit=5 a0=811fc30 a1=4c000 a2=0 a3=811fba8 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5741) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:07.598:5741) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5741) : arch=i386 syscall=open success=yes exit=5 a0=8120098 a1=4c000 a2=0 a3=811fe60 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5742) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:07.598:5742) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5742) : arch=i386 syscall=open success=yes exit=5 a0=8120278 a1=4c000 a2=0 a3=811fa68 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5743) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:07.598:5743) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5743) : arch=i386 syscall=open success=yes exit=5 a0=8120298 a1=4c000 a2=0 a3=811fb08 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.598:5744) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:07.598:5744) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.598:5744) : arch=i386 syscall=open success=yes exit=5 a0=8120a00 a1=4c000 a2=0 a3=81203b8 items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.621:5745) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:07.621:5745) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.621:5745) : arch=i386 syscall=open success=yes exit=5 a0=bfc7f79c a1=8002 a2=0 a3=bfc7f79c items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.625:5746) : item=0 name=/dev/mapper/system-home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:07.625:5746) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.625:5746) : arch=i386 syscall=open success=yes exit=6 a0=bfc7f9cc a1=8000 a2=0 a3=bfc7f9cc items=1 ppid=4147 pid=4940 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.742:5747) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:07.742:5747) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.742:5747) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4941 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.749:5748) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:07.749:5748) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:07.749:5748) : arch=i386 syscall=open success=yes exit=3 a0=bf871a9c a1=8002 a2=0 a3=bf871a9c items=1 ppid=4147 pid=4941 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:07.005:5691) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:07.005:5691) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:07.005:5691) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4930 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.066:5750) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:08.066:5750) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.066:5750) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.070:5751) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:08.070:5751) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.070:5751) : arch=i386 syscall=open success=yes exit=3 a0=bf988e6c a1=8002 a2=0 a3=bf988e6c items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.074:5752) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:08.074:5752) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.074:5752) : arch=i386 syscall=open success=yes exit=4 a0=8120690 a1=4c002 a2=0 a3=81205e8 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.086:5753) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:08.086:5753) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.086:5753) : arch=i386 syscall=open success=yes exit=4 a0=8120be8 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.090:5754) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:08.090:5754) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.090:5754) : arch=i386 syscall=open success=yes exit=4 a0=8120910 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.090:5755) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:08.090:5755) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.090:5755) : arch=i386 syscall=open success=yes exit=6 a0=8120570 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.094:5756) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.094:5756) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.094:5756) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4944 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.094:5757) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.094:5757) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.094:5757) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4943 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.098:5758) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:08.098:5758) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.098:5758) : arch=i386 syscall=open success=yes exit=6 a0=8120728 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.102:5759) : item=0 name=/dev/.udev/db/block:loop0 inode=25021 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.102:5759) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.102:5759) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.102:5760) : item=1 name=/dev/.udev/watch/165 inode=25020 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.102:5760) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.102:5760) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.102:5760) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.106:5761) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:08.106:5761) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.106:5761) : arch=i386 syscall=open success=yes exit=6 a0=8120590 a1=4c002 a2=0 a3=8120480 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.106:5762) : item=0 name=/dev/.udev/db/block:ram1 inode=25068 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.106:5762) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.106:5762) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807cbb0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.111:5763) : item=1 name=/dev/.udev/watch/173 inode=25067 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.111:5763) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.111:5763) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.111:5763) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.114:5764) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.114:5764) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.114:5764) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4945 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.122:5765) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:08.122:5765) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.122:5765) : arch=i386 syscall=open success=yes exit=3 a0=bfeccf1b a1=8800 a2=0 a3=bfeccf1b items=1 ppid=1911 pid=4944 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.126:5766) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.126:5766) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.126:5766) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4946 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.126:5767) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:08.126:5767) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.126:5767) : arch=i386 syscall=open success=yes exit=6 a0=8120930 a1=4c002 a2=0 a3=8120738 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.126:5768) : item=0 name=/dev/.udev/db/block:ram2 inode=25077 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.126:5768) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.126:5768) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807d348 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.033:5749) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:08.033:5749) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.033:5749) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.126:5769) : item=1 name=/dev/.udev/watch/175 inode=25076 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.126:5769) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.126:5769) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.126:5769) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080a88 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.130:5770) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.130:5770) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.130:5770) : arch=i386 syscall=open success=yes exit=6 a0=8120c08 a1=4c002 a2=0 a3=8120a10 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.130:5771) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:08.130:5771) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.130:5771) : arch=i386 syscall=open success=yes exit=6 a0=8120c28 a1=4c002 a2=0 a3=8120aa8 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.130:5772) : item=0 name=/dev/.udev/db/block:ram3 inode=25093 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.130:5772) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.130:5772) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807db10 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.134:5773) : item=0 name=/dev/.udev/db/block:ram4 inode=25043 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.134:5773) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.134:5773) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807df48 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.134:5774) : item=1 name=/dev/.udev/watch/179 inode=25092 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.134:5774) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.134:5774) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.134:5774) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.134:5775) : item=1 name=/dev/.udev/watch/168 inode=25042 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.134:5775) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.134:5775) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.134:5775) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807db20 a3=bff1f71c items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.134:5776) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:08.134:5776) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.134:5776) : arch=i386 syscall=open success=yes exit=6 a0=81203a8 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.134:5777) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:08.134:5777) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.134:5777) : arch=i386 syscall=open success=yes exit=6 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.134:5778) : item=0 name=/dev/.udev/db/block:ram5 inode=25048 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.134:5778) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.134:5778) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e370 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.134:5779) : item=1 name=/dev/.udev/watch/169 inode=25047 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.134:5779) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.134:5779) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.134:5779) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807df48 a3=bff1f71c items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.134:5780) : item=0 name=/dev/.udev/db/block:ram6 inode=25044 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.134:5780) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.134:5780) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e7c0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.138:5781) : item=1 name=/dev/.udev/watch/166 inode=25024 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.138:5781) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.138:5781) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.138:5781) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80680c0 a3=bff1f71c items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.138:5782) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:08.138:5782) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.138:5782) : arch=i386 syscall=open success=yes exit=6 a0=8120c48 a1=4c002 a2=0 a3=8120b40 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.142:5783) : item=0 name=/dev/.udev/db/block:ram7 inode=25072 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.142:5783) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.142:5783) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807ed40 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.142:5784) : item=1 name=/dev/.udev/watch/174 inode=25071 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.142:5784) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.142:5784) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.142:5784) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807eb98 a3=bff1f71c items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.142:5785) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:08.142:5785) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.142:5785) : arch=i386 syscall=open success=yes exit=3 a0=bffd4f3e a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4945 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.142:5786) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:08.142:5786) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.142:5786) : arch=i386 syscall=open success=yes exit=6 a0=8120950 a1=4c002 a2=0 a3=81207d0 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.146:5787) : item=0 name=/dev/.udev/db/block:ram8 inode=25082 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.146:5787) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.146:5787) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f050 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.146:5788) : item=1 name=/dev/.udev/watch/176 inode=25081 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.146:5788) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.146:5788) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.146:5788) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.146:5789) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.146:5789) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.146:5789) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4947 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.146:5790) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:08.146:5790) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.146:5790) : arch=i386 syscall=open success=yes exit=6 a0=8120970 a1=4c002 a2=0 a3=8120868 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.150:5791) : item=0 name=/dev/.udev/db/block:ram9 inode=25096 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.150:5791) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.150:5791) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f4d0 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.150:5792) : item=1 name=/dev/.udev/watch/178 inode=25095 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.150:5792) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.150:5792) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.150:5792) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.150:5793) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.150:5793) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.150:5793) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4747 pid=4948 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.154:5794) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:08.154:5794) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.154:5794) : arch=i386 syscall=open success=yes exit=6 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.154:5795) : item=0 name=/dev/.udev/db/block:ram10 inode=25052 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.154:5795) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.154:5795) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f950 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.154:5796) : item=1 name=/dev/.udev/watch/170 inode=25051 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.154:5796) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.154:5796) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.154:5796) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.158:5797) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.158:5797) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.158:5797) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4749 pid=4949 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.158:5798) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:08.158:5798) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.158:5798) : arch=i386 syscall=open success=yes exit=6 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.158:5799) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.158:5799) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.158:5799) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4750 pid=4950 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.162:5800) : item=0 name=/dev/.udev/db/block:ram11 inode=25094 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.162:5800) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.162:5800) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068440 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.162:5801) : item=1 name=/dev/.udev/watch/177 inode=25085 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.162:5801) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.162:5801) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.162:5801) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.170:5802) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.170:5802) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.170:5802) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4756 pid=4952 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.170:5803) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:08.170:5803) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.170:5803) : arch=i386 syscall=open success=yes exit=6 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.170:5804) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:08.170:5804) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.170:5804) : arch=i386 syscall=open success=yes exit=6 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.170:5805) : item=0 name=/dev/.udev/db/block:ram12 inode=25106 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.170:5805) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.170:5805) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80688c0 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.170:5806) : item=1 name=/dev/.udev/watch/181 inode=25105 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.170:5806) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.170:5806) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.170:5806) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.174:5807) : item=0 name=/dev/.udev/db/block:ram13 inode=25028 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.174:5807) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.174:5807) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068d40 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.174:5808) : item=1 name=/dev/.udev/watch/167 inode=25027 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.174:5808) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.174:5808) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.174:5808) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.174:5809) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:08.174:5809) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.174:5809) : arch=i386 syscall=open success=yes exit=6 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.178:5810) : item=0 name=/dev/.udev/db/block:ram14 inode=25064 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.178:5810) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.178:5810) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80691c0 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.178:5811) : item=1 name=/dev/.udev/watch/172 inode=25063 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.178:5811) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.178:5811) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.178:5811) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.182:5812) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:08.182:5812) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.182:5812) : arch=i386 syscall=open success=yes exit=6 a0=8120a00 a1=4c002 a2=0 a3=81203b8 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.182:5813) : item=0 name=/dev/.udev/db/block:ram15 inode=25101 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.182:5813) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.182:5813) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=80778c0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.182:5814) : item=1 name=/dev/.udev/watch/180 inode=25100 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.182:5814) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.182:5814) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.182:5814) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8083f78 a3=bff1f71c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.190:5815) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:08.190:5815) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.190:5815) : arch=i386 syscall=open success=yes exit=3 a0=bfc7df4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4946 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.198:5816) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25259 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5816) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5816) : item=0 name=ram1 block/1:1 
>type=CWD msg=audit(04/20/10 11:58:08.198:5816) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.198:5816) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.198:5817) : item=4 name=/dev/.udev/db/block:ram1 inode=25259 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5817) : item=3 name=/dev/.udev/db/block:ram1 inode=25068 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5817) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25259 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5817) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5817) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.198:5817) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.198:5817) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.198:5818) : item=0 name=/dev/block/1:1 inode=3882 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.198:5818) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.198:5818) : arch=i386 syscall=readlink success=yes exit=7 a0=807fd60 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.198:5819) : item=0 name=/dev/.udev/watch/190 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.198:5819) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.198:5819) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80793a0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.198:5820) : item=2 name=/dev/.udev/watch/190 inode=25262 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5820) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5820) : item=0 name=/devices/virtual/block/ram1 
>type=CWD msg=audit(04/20/10 11:58:08.198:5820) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.198:5820) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=80793a0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.198:5821) : item=1 name=/dev/.udev/db/block:ram1.tmp inode=25263 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5821) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.198:5821) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.198:5821) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.198:5822) : item=4 name=/dev/.udev/db/block:ram1 inode=25263 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5822) : item=3 name=/dev/.udev/db/block:ram1 inode=25259 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5822) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25263 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5822) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.198:5822) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.198:5822) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.198:5822) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.202:5823) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.202:5823) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.202:5823) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4757 pid=4953 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.206:5824) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.206:5824) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.206:5824) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4758 pid=4954 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.206:5825) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.206:5825) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.206:5825) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4759 pid=4955 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.206:5826) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:08.206:5826) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.206:5826) : arch=i386 syscall=open success=yes exit=6 a0=80efc43 a1=8000 a2=0 a3=20 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.214:5827) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.214:5827) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.214:5827) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4760 pid=4956 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.218:5828) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:08.218:5828) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.218:5828) : arch=i386 syscall=open success=yes exit=3 a0=bff6df4b a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4947 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.222:5829) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.222:5829) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.222:5829) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=4957 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.230:5830) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:08.230:5830) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.230:5830) : arch=i386 syscall=open success=yes exit=3 a0=bffabf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4756 pid=4952 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.234:5831) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.234:5831) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.234:5831) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4755 pid=4951 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.242:5832) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:08.242:5832) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.242:5832) : arch=i386 syscall=open success=yes exit=3 a0=bff52f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4750 pid=4950 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.246:5833) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:08.246:5833) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.246:5833) : arch=i386 syscall=open success=yes exit=3 a0=bfa3cf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4747 pid=4948 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.250:5834) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:08.250:5834) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.250:5834) : arch=i386 syscall=open success=yes exit=3 a0=bf9f6f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4759 pid=4955 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.254:5835) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.254:5835) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.254:5835) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4744 pid=4961 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.258:5836) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.258:5836) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.258:5836) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4958 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.262:5837) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25266 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5837) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5837) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:58:08.262:5837) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.262:5837) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.262:5838) : item=4 name=/dev/.udev/db/block:ram2 inode=25266 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5838) : item=3 name=/dev/.udev/db/block:ram2 inode=25077 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5838) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25266 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5838) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5838) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.262:5838) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.262:5838) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.262:5839) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.262:5839) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.262:5839) : arch=i386 syscall=readlink success=yes exit=7 a0=8079a28 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.262:5840) : item=0 name=/dev/.udev/watch/191 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.262:5840) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.262:5840) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.262:5841) : item=2 name=/dev/.udev/watch/191 inode=25269 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5841) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5841) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:58:08.262:5841) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.262:5841) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d1c a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.262:5842) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=25270 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5842) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.262:5842) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.262:5842) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e6f0 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.262:5843) : item=4 name=/dev/.udev/db/block:ram2 inode=25270 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5843) : item=3 name=/dev/.udev/db/block:ram2 inode=25266 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5843) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25270 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5843) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.262:5843) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.262:5843) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.262:5843) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.266:5844) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.266:5844) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.266:5844) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4959 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.270:5845) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:08.270:5845) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.270:5845) : arch=i386 syscall=open success=yes exit=3 a0=bfb48f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4757 pid=4953 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.274:5846) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:08.274:5846) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.274:5846) : arch=i386 syscall=open success=yes exit=3 a0=bfdd8f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4749 pid=4949 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.278:5847) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.278:5847) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.278:5847) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4745 pid=4960 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.282:5848) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.282:5848) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.282:5848) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4962 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.286:5849) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:08.286:5849) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.286:5849) : arch=i386 syscall=open success=yes exit=3 a0=bfa59f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4758 pid=4954 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.294:5850) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:08.294:5850) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.294:5850) : arch=i386 syscall=open success=yes exit=3 a0=bff59f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4744 pid=4961 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.298:5851) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25271 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5851) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5851) : item=0 name=ram6 block/1:6 
>type=CWD msg=audit(04/20/10 11:58:08.298:5851) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.298:5851) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.298:5852) : item=4 name=/dev/.udev/db/block:ram6 inode=25271 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5852) : item=3 name=/dev/.udev/db/block:ram6 inode=25044 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5852) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25271 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5852) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5852) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.298:5852) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.298:5852) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.298:5853) : item=0 name=/dev/block/1:6 inode=3887 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.298:5853) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.298:5853) : arch=i386 syscall=readlink success=yes exit=7 a0=8079260 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.298:5854) : item=0 name=/dev/.udev/watch/192 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.298:5854) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.298:5854) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e370 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.298:5855) : item=2 name=/dev/.udev/watch/192 inode=25274 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5855) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5855) : item=0 name=/devices/virtual/block/ram6 
>type=CWD msg=audit(04/20/10 11:58:08.298:5855) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.298:5855) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=807e370 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.298:5856) : item=1 name=/dev/.udev/db/block:ram6.tmp inode=25275 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5856) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.298:5856) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.298:5856) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f7c8 items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.298:5857) : item=4 name=/dev/.udev/db/block:ram6 inode=25275 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5857) : item=3 name=/dev/.udev/db/block:ram6 inode=25271 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5857) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25275 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5857) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.298:5857) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.298:5857) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.298:5857) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.306:5858) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:08.306:5858) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.306:5858) : arch=i386 syscall=open success=yes exit=3 a0=bf987f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=4957 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.306:5859) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:08.306:5859) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.306:5859) : arch=i386 syscall=open success=yes exit=3 a0=bf961f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4745 pid=4960 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.310:5860) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25276 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5860) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5860) : item=0 name=ram8 block/1:8 
>type=CWD msg=audit(04/20/10 11:58:08.310:5860) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.310:5860) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.310:5861) : item=4 name=/dev/.udev/db/block:ram8 inode=25276 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5861) : item=3 name=/dev/.udev/db/block:ram8 inode=25082 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5861) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25276 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5861) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5861) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.310:5861) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.310:5861) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.310:5862) : item=0 name=/dev/block/1:8 inode=3952 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.310:5862) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.310:5862) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.310:5863) : item=0 name=/dev/.udev/watch/193 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.310:5863) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.310:5863) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.310:5864) : item=2 name=/dev/.udev/watch/193 inode=25279 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5864) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5864) : item=0 name=/devices/virtual/block/ram8 
>type=CWD msg=audit(04/20/10 11:58:08.310:5864) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.310:5864) : arch=i386 syscall=symlink success=yes exit=0 a0=806818c a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.310:5865) : item=1 name=/dev/.udev/db/block:ram8.tmp inode=25280 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5865) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.310:5865) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.310:5865) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f050 items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.310:5866) : item=4 name=/dev/.udev/db/block:ram8 inode=25280 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5866) : item=3 name=/dev/.udev/db/block:ram8 inode=25276 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5866) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25280 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5866) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.310:5866) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.310:5866) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.310:5866) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.314:5867) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25281 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5867) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5867) : item=0 name=ram7 block/1:7 
>type=CWD msg=audit(04/20/10 11:58:08.314:5867) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.314:5867) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.314:5868) : item=4 name=/dev/.udev/db/block:ram7 inode=25281 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5868) : item=3 name=/dev/.udev/db/block:ram7 inode=25072 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5868) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25281 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5868) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5868) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.314:5868) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.314:5868) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.314:5869) : item=0 name=/dev/block/1:7 inode=3917 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.314:5869) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.314:5869) : arch=i386 syscall=readlink success=yes exit=7 a0=8079bd8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.314:5870) : item=0 name=/dev/.udev/watch/194 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.314:5870) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.314:5870) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e7c0 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.314:5871) : item=2 name=/dev/.udev/watch/194 inode=25284 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5871) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5871) : item=0 name=/devices/virtual/block/ram7 
>type=CWD msg=audit(04/20/10 11:58:08.314:5871) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.314:5871) : arch=i386 syscall=symlink success=yes exit=0 a0=807e894 a1=bff1fbfc a2=8068008 a3=807e7c0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.314:5872) : item=1 name=/dev/.udev/db/block:ram7.tmp inode=25285 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5872) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.314:5872) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.314:5872) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ed40 items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.314:5873) : item=4 name=/dev/.udev/db/block:ram7 inode=25285 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5873) : item=3 name=/dev/.udev/db/block:ram7 inode=25281 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5873) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25285 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5873) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.314:5873) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.314:5873) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.314:5873) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5874) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25286 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5874) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5874) : item=0 name=ram11 block/1:11 
>type=CWD msg=audit(04/20/10 11:58:08.322:5874) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5874) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5875) : item=4 name=/dev/.udev/db/block:ram11 inode=25286 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5875) : item=3 name=/dev/.udev/db/block:ram11 inode=25094 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5875) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25286 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5875) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5875) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5875) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5875) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5876) : item=0 name=/dev/block/1:11 inode=3907 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5876) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5876) : arch=i386 syscall=readlink success=yes exit=8 a0=8079c20 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5877) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25289 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5877) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5877) : item=0 name=ram10 block/1:10 
>type=CWD msg=audit(04/20/10 11:58:08.322:5877) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5877) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5878) : item=0 name=/dev/.udev/watch/195 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5878) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5878) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f950 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5879) : item=2 name=/dev/.udev/watch/195 inode=25290 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5879) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5879) : item=0 name=/devices/virtual/block/ram11 
>type=CWD msg=audit(04/20/10 11:58:08.322:5879) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5879) : arch=i386 syscall=symlink success=yes exit=0 a0=807facc a1=bff1fbfc a2=8068008 a3=807f950 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5880) : item=4 name=/dev/.udev/db/block:ram10 inode=25289 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5880) : item=3 name=/dev/.udev/db/block:ram10 inode=25052 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5880) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25289 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5880) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5880) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5880) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5880) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5881) : item=1 name=/dev/.udev/db/block:ram11.tmp inode=25291 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5881) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5881) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5881) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=80697e8 items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5882) : item=0 name=/dev/block/1:10 inode=3932 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5882) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5882) : arch=i386 syscall=readlink success=yes exit=8 a0=8080958 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5883) : item=4 name=/dev/.udev/db/block:ram11 inode=25291 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5883) : item=3 name=/dev/.udev/db/block:ram11 inode=25286 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5883) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25291 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5883) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5883) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5883) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5883) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5884) : item=0 name=/dev/.udev/watch/196 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5884) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5884) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f4d0 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5885) : item=2 name=/dev/.udev/watch/196 inode=25294 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5885) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5885) : item=0 name=/devices/virtual/block/ram10 
>type=CWD msg=audit(04/20/10 11:58:08.322:5885) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5885) : arch=i386 syscall=symlink success=yes exit=0 a0=807f64c a1=bff1fbfc a2=8068008 a3=807f4d0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5886) : item=1 name=/dev/.udev/db/block:ram10.tmp inode=25295 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5886) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5886) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5886) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f950 items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.322:5887) : item=4 name=/dev/.udev/db/block:ram10 inode=25295 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5887) : item=3 name=/dev/.udev/db/block:ram10 inode=25289 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5887) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25295 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5887) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.322:5887) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.322:5887) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.322:5887) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.326:5888) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:08.326:5888) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.326:5888) : arch=i386 syscall=open success=yes exit=3 a0=bfc41f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4760 pid=4956 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.326:5889) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25296 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5889) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5889) : item=0 name=ram12 block/1:12 
>type=CWD msg=audit(04/20/10 11:58:08.326:5889) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.326:5889) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.326:5890) : item=4 name=/dev/.udev/db/block:ram12 inode=25296 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5890) : item=3 name=/dev/.udev/db/block:ram12 inode=25106 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5890) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25296 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5890) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5890) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.326:5890) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.326:5890) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.326:5891) : item=0 name=/dev/block/1:12 inode=3902 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.326:5891) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.326:5891) : arch=i386 syscall=readlink success=yes exit=8 a0=80805d8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.326:5892) : item=0 name=/dev/.udev/watch/197 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.326:5892) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.326:5892) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068440 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.326:5893) : item=2 name=/dev/.udev/watch/197 inode=25299 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5893) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5893) : item=0 name=/devices/virtual/block/ram12 
>type=CWD msg=audit(04/20/10 11:58:08.326:5893) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.326:5893) : arch=i386 syscall=symlink success=yes exit=0 a0=80685bc a1=bff1fbfc a2=8068008 a3=8068440 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.326:5894) : item=1 name=/dev/.udev/db/block:ram12.tmp inode=25300 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5894) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.326:5894) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.326:5894) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8069c68 items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.326:5895) : item=4 name=/dev/.udev/db/block:ram12 inode=25300 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5895) : item=3 name=/dev/.udev/db/block:ram12 inode=25296 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5895) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25300 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5895) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.326:5895) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.326:5895) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.326:5895) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.334:5896) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.334:5896) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.334:5896) : arch=i386 syscall=open success=yes exit=3 a0=bf806f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4959 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.334:5897) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25301 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5897) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5897) : item=0 name=ram15 block/1:15 
>type=CWD msg=audit(04/20/10 11:58:08.334:5897) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.334:5897) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.334:5898) : item=4 name=/dev/.udev/db/block:ram15 inode=25301 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5898) : item=3 name=/dev/.udev/db/block:ram15 inode=25101 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5898) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25301 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5898) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5898) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.334:5898) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.334:5898) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.334:5899) : item=0 name=/dev/block/1:15 inode=3927 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.334:5899) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.334:5899) : arch=i386 syscall=readlink success=yes exit=8 a0=8083e68 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.334:5900) : item=0 name=/dev/.udev/watch/198 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.334:5900) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.334:5900) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807fcd0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.334:5901) : item=2 name=/dev/.udev/watch/198 inode=25304 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5901) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5901) : item=0 name=/devices/virtual/block/ram15 
>type=CWD msg=audit(04/20/10 11:58:08.334:5901) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.334:5901) : arch=i386 syscall=symlink success=yes exit=0 a0=8084124 a1=bff1fbfc a2=8068008 a3=807fcd0 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.334:5902) : item=1 name=/dev/.udev/db/block:ram15.tmp inode=25305 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.334:5902) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.334:5902) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.334:5902) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=8083f58 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.346:5903) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:08.346:5903) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.346:5903) : arch=i386 syscall=open success=yes exit=3 a0=bfb87bcc a1=8800 a2=0 a3=bfb87f84 items=1 ppid=1911 pid=4962 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.346:5904) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25311 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.346:5904) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.346:5904) : item=0 name=ram14 block/1:14 
>type=CWD msg=audit(04/20/10 11:58:08.346:5904) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.346:5904) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.342:5905) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25309 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.342:5905) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.342:5905) : item=0 name=ram5 block/1:5 
>type=CWD msg=audit(04/20/10 11:58:08.342:5905) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.342:5905) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.413:5906) : item=4 name=/dev/.udev/db/block:ram5 inode=25309 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.413:5906) : item=3 name=/dev/.udev/db/block:ram5 inode=25048 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.413:5906) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25309 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.413:5906) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.413:5906) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.413:5906) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.413:5906) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.413:5907) : item=0 name=/dev/block/1:5 inode=3897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.413:5907) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.413:5907) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.413:5908) : item=0 name=/dev/.udev/watch/199 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.413:5908) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.413:5908) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80680e0 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.354:5909) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:08.354:5909) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.354:5909) : arch=i386 syscall=open success=yes exit=3 a0=bf8cbf4b a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4943 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.409:5910) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:08.409:5910) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.409:5910) : arch=i386 syscall=open success=yes exit=3 a0=bfb87bcc a1=8800 a2=0 a3=8052008 items=1 ppid=1911 pid=4962 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.338:5911) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25307 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.338:5911) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.338:5911) : item=0 name=ram13 block/1:13 
>type=CWD msg=audit(04/20/10 11:58:08.338:5911) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.338:5911) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.441:5913) : item=2 name=/dev/.udev/watch/199 inode=25314 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5913) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5913) : item=0 name=/devices/virtual/block/ram5 
>type=CWD msg=audit(04/20/10 11:58:08.441:5913) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.441:5913) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=80680e0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.342:5912) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25308 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.342:5912) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.342:5912) : item=0 name=ram4 block/1:4 
>type=CWD msg=audit(04/20/10 11:58:08.342:5912) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.342:5912) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.441:5914) : item=1 name=/dev/.udev/db/block:ram5.tmp inode=25315 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5914) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.441:5914) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.441:5914) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f378 items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.441:5915) : item=4 name=/dev/.udev/db/block:ram4 inode=25308 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5915) : item=3 name=/dev/.udev/db/block:ram4 inode=25043 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5915) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25308 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5915) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5915) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.441:5915) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.441:5915) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.441:5916) : item=0 name=/dev/block/1:4 inode=3922 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.441:5916) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.441:5916) : arch=i386 syscall=readlink success=yes exit=7 a0=8080498 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.441:5917) : item=4 name=/dev/.udev/db/block:ram5 inode=25315 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5917) : item=3 name=/dev/.udev/db/block:ram5 inode=25309 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5917) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25315 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5917) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.441:5917) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.441:5917) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.441:5917) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.473:5918) : item=4 name=/dev/.udev/db/block:ram13 inode=25307 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5918) : item=3 name=/dev/.udev/db/block:ram13 inode=25028 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5918) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25307 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5918) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5918) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.473:5918) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.473:5918) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.473:5919) : item=0 name=/dev/block/1:13 inode=3939 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.473:5919) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.473:5919) : arch=i386 syscall=readlink success=yes exit=8 a0=8080958 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.473:5920) : item=0 name=/dev/.udev/watch/201 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.473:5920) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.473:5920) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80688c0 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.473:5921) : item=2 name=/dev/.udev/watch/201 inode=25320 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5921) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5921) : item=0 name=/devices/virtual/block/ram13 
>type=CWD msg=audit(04/20/10 11:58:08.473:5921) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.473:5921) : arch=i386 syscall=symlink success=yes exit=0 a0=80689e4 a1=bff1fbfc a2=8068008 a3=80688c0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.473:5922) : item=1 name=/dev/.udev/db/block:ram13.tmp inode=25321 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5922) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.473:5922) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.473:5922) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a0e8 items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.473:5923) : item=4 name=/dev/.udev/db/block:ram13 inode=25321 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5923) : item=3 name=/dev/.udev/db/block:ram13 inode=25307 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5923) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25321 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5923) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.473:5923) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.473:5923) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.473:5923) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.342:5924) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25310 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.342:5924) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.342:5924) : item=0 name=ram3 block/1:3 
>type=CWD msg=audit(04/20/10 11:58:08.342:5924) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.342:5924) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.445:5925) : item=0 name=/dev/.udev/watch/200 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.445:5925) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.445:5925) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080af8 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.561:5926) : item=4 name=/dev/.udev/db/block:ram3 inode=25310 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.561:5926) : item=3 name=/dev/.udev/db/block:ram3 inode=25093 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.561:5926) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25310 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.561:5926) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.561:5926) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.561:5926) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.561:5926) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.561:5927) : item=0 name=/dev/block/1:3 inode=3947 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.561:5927) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.561:5927) : arch=i386 syscall=readlink success=yes exit=7 a0=8080000 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.565:5928) : item=4 name=/dev/.udev/db/block:ram15 inode=25305 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5928) : item=3 name=/dev/.udev/db/block:ram15 inode=25301 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5928) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25305 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5928) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5928) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.565:5928) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.565:5928) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.338:5929) : item=1 name=/dev/.udev/db/block:loop0.tmp inode=25306 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.338:5929) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.338:5929) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.338:5929) : arch=i386 syscall=open success=yes exit=3 a0=bff1f224 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.565:5930) : item=4 name=/dev/.udev/db/block:loop0 inode=25306 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5930) : item=3 name=/dev/.udev/db/block:loop0 inode=25021 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5930) : item=2 name=/dev/.udev/db/block:loop0.tmp inode=25306 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5930) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5930) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.565:5930) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.565:5930) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.565:5931) : item=0 name=/dev/.udev/links/root inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.565:5931) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.565:5931) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=80806b0 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.565:5932) : item=0 name=/dev/root inode=5780 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.565:5932) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.565:5932) : arch=i386 syscall=readlink success=yes exit=5 a0=8079d80 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.565:5933) : item=1 name=/dev/.udev/links/root/b7:0 inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.565:5933) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:58:08.565:5933) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.565:5933) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8079dcc a1=bff1da7c a2=80806b0 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.565:5934) : item=0 name=/dev/block/7:0 inode=4679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.565:5934) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.565:5934) : arch=i386 syscall=readlink success=yes exit=8 a0=8079bd8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.565:5935) : item=0 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.565:5935) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.565:5935) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=80806b0 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.565:5936) : item=0 name=/dev/disk/by-uuid/32788f6d-b5ae-439c-b677-b97c31aedf46 inode=4681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.565:5936) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.565:5936) : arch=i386 syscall=readlink success=yes exit=11 a0=8080190 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.569:5937) : item=1 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46/b7:0 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.569:5937) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:58:08.569:5937) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.569:5937) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8079dcc a1=bff1da7c a2=80806b0 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.557:5938) : item=1 name=/dev/mapper/system-root inode=25332 dev=00:0e mode=block,640 ouid=root ogid=root rdev=fd:01 
>type=PATH msg=audit(04/20/10 11:58:08.557:5938) : item=0 name=/dev/mapper/ inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.557:5938) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.557:5938) : arch=i386 syscall=mknod success=yes exit=0 a0=bf987cfc a1=61a0 a2=fd01 a3=fd01 items=2 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.585:5939) : item=2 name=/dev/.udev/watch/200 inode=25338 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5939) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5939) : item=0 name=/devices/virtual/block/ram4 
>type=CWD msg=audit(04/20/10 11:58:08.585:5939) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.585:5939) : arch=i386 syscall=symlink success=yes exit=0 a0=807952c a1=bff1fbfc a2=8068008 a3=8080af8 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.585:5940) : item=1 name=/dev/.udev/db/block:ram4.tmp inode=25339 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5940) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.585:5940) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.585:5940) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef50 items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.585:5941) : item=4 name=/dev/.udev/db/block:ram4 inode=25339 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5941) : item=3 name=/dev/.udev/db/block:ram4 inode=25308 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5941) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25339 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5941) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5941) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.585:5941) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.585:5941) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.569:5942) : item=0 name=/dev/mapper/system-root inode=25332 dev=00:0e mode=block,640 ouid=root ogid=root rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.569:5942) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.569:5942) : arch=i386 syscall=chown32 success=yes exit=0 a0=bf987cfc a1=0 a2=6 a3=fd01 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.585:5943) : item=0 name=/dev/mapper/system-root inode=25332 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.585:5943) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.585:5943) : arch=i386 syscall=open success=yes exit=3 a0=bf987c9c a1=8000 a2=0 a3=bf987c9c items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.585:5944) : item=0 name=/dev/mapper/system-root inode=25332 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.585:5944) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.585:5944) : arch=i386 syscall=open success=yes exit=3 a0=bf987cfc a1=8000 a2=0 a3=bf987cfc items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.585:5945) : item=2 name=/dev/system/root inode=25340 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5945) : item=1 name=/dev/system/ inode=25006 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.585:5945) : item=0 name=/dev/mapper/system-root 
>type=CWD msg=audit(04/20/10 11:58:08.585:5945) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.585:5945) : arch=i386 syscall=symlink success=yes exit=0 a0=bf986d4c a1=bf987d4c a2=8106ff4 a3=bf984d4c items=3 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.585:5946) : item=0 name=/dev/system/root inode=25332 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.585:5946) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.585:5946) : arch=i386 syscall=open success=yes exit=3 a0=8120d38 a1=4c002 a2=0 a3=8120cb0 items=1 ppid=4147 pid=4942 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.569:5947) : item=0 name=/dev/.udev/watch/203 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.569:5947) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.569:5947) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807d700 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.589:5948) : item=2 name=/dev/.udev/watch/203 inode=25341 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5948) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5948) : item=0 name=/devices/virtual/block/ram3 
>type=CWD msg=audit(04/20/10 11:58:08.589:5948) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.589:5948) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=807d700 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.589:5949) : item=1 name=/dev/.udev/db/block:ram3.tmp inode=25342 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5949) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.589:5949) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.589:5949) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807eb18 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.589:5950) : item=4 name=/dev/.udev/db/block:ram14 inode=25311 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5950) : item=3 name=/dev/.udev/db/block:ram14 inode=25064 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5950) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25311 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5950) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5950) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.589:5950) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.589:5950) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.589:5951) : item=4 name=/dev/.udev/db/block:ram3 inode=25342 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5951) : item=3 name=/dev/.udev/db/block:ram3 inode=25310 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5951) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25342 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5951) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.589:5951) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.589:5951) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.589:5951) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.589:5952) : item=0 name=/dev/block/1:14 inode=3912 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.589:5952) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.589:5952) : arch=i386 syscall=readlink success=yes exit=8 a0=8080000 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.557:5953) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.557:5953) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.557:5953) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4964 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.589:5954) : item=0 name=/dev/.udev/watch/205 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.589:5954) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.589:5954) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068d40 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.593:5955) : item=2 name=/dev/.udev/watch/205 inode=25345 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.593:5955) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.593:5955) : item=0 name=/devices/virtual/block/ram14 
>type=CWD msg=audit(04/20/10 11:58:08.593:5955) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.593:5955) : arch=i386 syscall=symlink success=yes exit=0 a0=8068ebc a1=bff1fbfc a2=8068008 a3=8068d40 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.593:5956) : item=1 name=/dev/.udev/db/block:ram14.tmp inode=25346 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.593:5956) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.593:5956) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.593:5956) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a568 items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.593:5957) : item=4 name=/dev/.udev/db/block:ram14 inode=25346 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.593:5957) : item=3 name=/dev/.udev/db/block:ram14 inode=25311 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.593:5957) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25346 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.593:5957) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.593:5957) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.593:5957) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.593:5957) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.338:5958) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:08.338:5958) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.338:5958) : arch=i386 syscall=open success=yes exit=3 a0=bf87ef4b a1=8000 a2=0 a3=804f008 items=1 ppid=4755 pid=4951 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.601:5959) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25347 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5959) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5959) : item=0 name=ram9 block/1:9 
>type=CWD msg=audit(04/20/10 11:58:08.601:5959) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.601:5959) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.601:5960) : item=4 name=/dev/.udev/db/block:ram9 inode=25347 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5960) : item=3 name=/dev/.udev/db/block:ram9 inode=25096 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5960) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25347 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5960) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5960) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.601:5960) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.601:5960) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.601:5961) : item=0 name=/dev/block/1:9 inode=3940 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.601:5961) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.601:5961) : arch=i386 syscall=readlink success=yes exit=7 a0=80805d8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.601:5962) : item=0 name=/dev/.udev/watch/206 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.601:5962) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.601:5962) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f050 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.601:5963) : item=2 name=/dev/.udev/watch/206 inode=25350 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5963) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5963) : item=0 name=/devices/virtual/block/ram9 
>type=CWD msg=audit(04/20/10 11:58:08.601:5963) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.601:5963) : arch=i386 syscall=symlink success=yes exit=0 a0=807f1cc a1=bff1fbfc a2=8068008 a3=807f050 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.601:5964) : item=1 name=/dev/.udev/db/block:ram9.tmp inode=25351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.601:5964) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.601:5964) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.601:5964) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f4d0 items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.625:5965) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:08.625:5965) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.625:5965) : arch=i386 syscall=open success=yes exit=3 a0=bfdbdd0c a1=8002 a2=0 a3=bfdbdd0c items=1 ppid=4741 pid=4964 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.613:5966) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.613:5966) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.613:5966) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4965 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.657:5967) : item=1 name=/dev/.tmp-block-253:1 inode=25355 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:01 
>type=PATH msg=audit(04/20/10 11:58:08.657:5967) : item=0 name=/dev/ inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.657:5967) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.657:5967) : arch=i386 syscall=mknod success=yes exit=0 a0=8068190 a1=6180 a2=fd01 a3=0 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.657:5968) : item=0 name=/dev/.tmp-block-253:1 inode=25355 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.657:5968) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.657:5968) : arch=i386 syscall=chmod success=yes exit=0 a0=8068190 a1=6180 a2=8068008 a3=0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.657:5969) : item=0 name=/dev/.tmp-block-253:1 inode=25355 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.657:5969) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.657:5969) : arch=i386 syscall=chown32 success=yes exit=0 a0=8068190 a1=0 a2=0 a3=0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.657:5970) : item=4 name=/dev/.udev/db/block:ram9 inode=25351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5970) : item=3 name=/dev/.udev/db/block:ram9 inode=25347 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5970) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5970) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5970) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.657:5970) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.657:5970) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.569:5971) : item=0 name=/dev/.udev/watch/204 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.569:5971) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.569:5971) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.657:5972) : item=2 name=/dev/.udev/watch/204 inode=25357 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5972) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5972) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:58:08.657:5972) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.657:5972) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.657:5973) : item=1 name=/dev/.udev/db/block:loop0.tmp inode=25358 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5973) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.657:5973) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.657:5973) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.657:5974) : item=4 name=/dev/.udev/db/block:loop0 inode=25358 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5974) : item=3 name=/dev/.udev/db/block:loop0 inode=25306 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5974) : item=2 name=/dev/.udev/db/block:loop0.tmp inode=25358 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5974) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.657:5974) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.657:5974) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.657:5974) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.665:5975) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.665:5975) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.665:5975) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4967 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.669:5976) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.669:5976) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.669:5976) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4968 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.726:5977) : item=0 name=/dev/.tmp-block-253:1 inode=25355 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.726:5977) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.726:5977) : arch=i386 syscall=open success=yes exit=3 a0=bfb93db8 a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4967 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.726:5978) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:08.726:5978) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.726:5978) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.730:5979) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:08.730:5979) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.730:5979) : arch=i386 syscall=open success=yes exit=3 a0=bfd71c69 a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4968 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.738:5980) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.738:5980) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.738:5980) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4969 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.742:5981) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:08.742:5981) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.742:5981) : arch=i386 syscall=open success=yes exit=4 a0=bfe11c4d a1=8000 a2=0 a3=1 items=1 ppid=1911 pid=4969 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.746:5982) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.746:5982) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.746:5982) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4970 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.754:5983) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.754:5983) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.754:5983) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4971 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.762:5984) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:08.762:5984) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.762:5984) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4741 pid=4971 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.766:5985) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.766:5985) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.766:5985) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.766:5986) : item=0 name=/dev/.tmp-block-253:1 inode=25355 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.766:5986) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.766:5986) : arch=i386 syscall=chown32 success=yes exit=0 a0=8068190 a1=0 a2=0 a3=8068190 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.766:5987) : item=0 name=/dev/.tmp-block-253:1 inode=25355 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:08.766:5987) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.766:5987) : arch=i386 syscall=chmod success=yes exit=0 a0=8068190 a1=0 a2=8066ff4 a3=8068190 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.813:5988) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.813:5988) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:08.813:5988) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.949:5989) : item=1 name=/dev/.tmp-block-253:1 inode=25355 dev=00:0e mode=block,000 ouid=root ogid=root rdev=fd:01 
>type=PATH msg=audit(04/20/10 11:58:08.949:5989) : item=0 name=/dev/ inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.949:5989) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.949:5989) : arch=i386 syscall=unlink success=yes exit=0 a0=8068190 a1=0 a2=8066ff4 a3=8068190 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.949:5990) : item=1 name=/dev/.udev/db/block:dm-1.tmp inode=25371 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.949:5990) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.949:5990) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.949:5990) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=807dfa8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.949:5991) : item=3 name=/dev/.udev/db/block:dm-1 inode=25371 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.949:5991) : item=2 name=/dev/.udev/db/block:dm-1.tmp inode=25371 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.949:5991) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:08.949:5991) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.949:5991) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.949:5991) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=4 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.925:5992) : item=0 name=/dev/.udev/db/block:sda inode=25209 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:08.925:5992) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.925:5992) : arch=i386 syscall=open success=yes exit=3 a0=bfd3d8ac a1=8000 a2=1b6 a3=8055158 items=1 ppid=1911 pid=4970 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.958:5993) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:08.958:5993) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.958:5993) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1911 pid=4970 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.966:5994) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.966:5994) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.966:5994) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4972 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:08.974:5995) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:08.974:5995) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:08.974:5995) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4973 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.114:5997) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:09.114:5997) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.114:5997) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1911 pid=4972 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.118:5998) : item=0 name=/dev/.udev/db/block:sda inode=25209 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.118:5998) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.118:5998) : arch=i386 syscall=open success=yes exit=4 a0=bfcaa09c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1911 pid=4972 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.122:5999) : item=0 name=/dev/.udev/db/block:sda2 inode=25220 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.122:5999) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.122:5999) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.122:6000) : item=1 name=/dev/.udev/watch/189 inode=25219 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.122:6000) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.122:6000) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.122:6000) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80802b0 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.122:6001) : item=0 name=/dev/.udev/db/block:sda inode=25379 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.122:6001) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.122:6001) : arch=i386 syscall=open success=yes exit=3 a0=bff1d98c a1=8000 a2=1b6 a3=807d070 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.126:6002) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:09.126:6002) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.126:6002) : arch=i386 syscall=open success=yes exit=3 a0=bfe52e9c a1=8002 a2=0 a3=bfe52e9c items=1 ppid=1510 pid=4973 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.126:6003) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.126:6003) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.126:6003) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4975 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.134:6004) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:09.134:6004) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.134:6004) : arch=i386 syscall=open success=yes exit=3 a0=bfb4cc2a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=4975 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.138:6005) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.138:6005) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.138:6005) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4974 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.142:6006) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:09.142:6006) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.142:6006) : arch=i386 syscall=open success=yes exit=3 a0=bfe5ec2a a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4974 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.150:6007) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.150:6007) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.150:6007) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4976 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.221:6008) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.221:6008) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.221:6008) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4977 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.146:6009) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.146:6009) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.146:6009) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.249:6010) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.249:6010) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.249:6010) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4978 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.253:6011) : item=0 name=/dev/.udev/db/block:sda inode=25379 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.253:6011) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.253:6011) : arch=i386 syscall=open success=yes exit=3 a0=bfa3a1ec a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=4976 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.253:6012) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:09.253:6012) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.253:6012) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1911 pid=4976 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.257:6013) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.257:6013) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.257:6013) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4979 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6014) : item=0 name=/dev/.udev/db/block:sda inode=25379 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6014) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6014) : arch=i386 syscall=open success=yes exit=3 a0=bfd2987c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=4740 pid=4979 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6015) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6015) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6015) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=4740 pid=4979 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6016) : item=1 name=/dev/.udev/db/block:sda2.tmp inode=25392 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6016) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6016) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6016) : arch=i386 syscall=open success=yes exit=3 a0=bff1f224 a1=8241 a2=1b6 a3=8068800 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6017) : item=4 name=/dev/.udev/db/block:sda2 inode=25392 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6017) : item=3 name=/dev/.udev/db/block:sda2 inode=25220 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6017) : item=2 name=/dev/.udev/db/block:sda2.tmp inode=25392 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6017) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6017) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6017) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6017) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6018) : item=0 name=/dev/block/259:262144 inode=24065 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6018) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6018) : arch=i386 syscall=readlink success=yes exit=7 a0=807a2c0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6019) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24067 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6019) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6019) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=80806b0 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6020) : item=0 name=/dev/disk/by-id/ata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24066 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6020) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6020) : arch=i386 syscall=readlink success=yes exit=10 a0=807df00 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6021) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2/b259:262144 inode=24067 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6021) : item=0 name=/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda/sda2 
>type=CWD msg=audit(04/20/10 11:58:09.277:6021) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6021) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=807fd8c a1=bff1da7c a2=80806b0 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6022) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24070 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6022) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6022) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=80806b0 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6023) : item=0 name=/dev/disk/by-id/scsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24069 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6023) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6023) : arch=i386 syscall=readlink success=yes exit=10 a0=807e7a0 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6024) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2/b259:262144 inode=24070 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6024) : item=0 name=/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda/sda2 
>type=CWD msg=audit(04/20/10 11:58:09.277:6024) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6024) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=807fd8c a1=bff1da7c a2=80806b0 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6025) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part2 inode=24073 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6025) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6025) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=80806b0 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6026) : item=0 name=/dev/disk/by-path/pci-0000:00:0d.0-scsi-0:0:0:0-part2 inode=24072 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6026) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6026) : arch=i386 syscall=readlink success=yes exit=10 a0=807e8a0 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6027) : item=1 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part2/b259:262144 inode=24073 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6027) : item=0 name=/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda/sda2 
>type=CWD msg=audit(04/20/10 11:58:09.277:6027) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6027) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=807fd8c a1=bff1da7c a2=80806b0 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6028) : item=0 name=/dev/.udev/watch/209 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6028) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6028) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6029) : item=2 name=/dev/.udev/watch/209 inode=25395 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6029) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6029) : item=0 name=/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda/sda2 
>type=CWD msg=audit(04/20/10 11:58:09.277:6029) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6029) : arch=i386 syscall=symlink success=yes exit=0 a0=807fd8c a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.281:6030) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.281:6030) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.281:6030) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.277:6031) : item=1 name=/dev/.udev/db/block:sda2.tmp inode=25396 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.277:6031) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.277:6031) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.277:6031) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807cba0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.373:6032) : item=4 name=/dev/.udev/db/block:sda2 inode=25396 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.373:6032) : item=3 name=/dev/.udev/db/block:sda2 inode=25392 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.373:6032) : item=2 name=/dev/.udev/db/block:sda2.tmp inode=25396 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.373:6032) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:09.373:6032) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.373:6032) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.373:6032) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.421:6033) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.421:6033) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.421:6033) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.462:6034) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.462:6034) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.462:6034) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4980 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.470:6035) : item=0 name=/dev/.tmp-block-253:1 inode=25397 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:09.470:6035) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.470:6035) : arch=i386 syscall=open success=yes exit=3 a0=bfdded4b a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4980 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.474:6036) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.474:6036) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.474:6036) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.482:6037) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.482:6037) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.482:6037) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4981 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.498:6038) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:09.498:6038) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.498:6038) : arch=i386 syscall=open success=yes exit=3 a0=bfb3adbc a1=8002 a2=0 a3=bfb3adbc items=1 ppid=1510 pid=4981 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.525:6039) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.525:6039) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.525:6039) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.573:6040) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.573:6040) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.573:6040) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.625:6041) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.625:6041) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.625:6041) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4982 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.625:6042) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.625:6042) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.625:6042) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.633:6043) : item=0 name=/dev/.tmp-block-253:1 inode=25397 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:09.633:6043) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.633:6043) : arch=i386 syscall=open success=yes exit=3 a0=bfc69d3a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4982 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.653:6044) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.653:6044) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.653:6044) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4983 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.678:6045) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.678:6045) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.678:6045) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.713:6046) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:09.713:6046) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.713:6046) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=1510 pid=4983 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.725:6047) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.725:6047) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.725:6047) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.737:6048) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.737:6048) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.737:6048) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4984 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.777:6049) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.777:6049) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.777:6049) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.825:6050) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:09.825:6050) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.825:6050) : arch=i386 syscall=open success=yes exit=3 a0=bf9d43ec a1=8002 a2=0 a3=bf9d43ec items=1 ppid=1510 pid=4984 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-dm-expor exe=/lib/udev/udisks-dm-export key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.829:6051) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.829:6051) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.829:6051) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.881:6052) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.881:6052) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.881:6052) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.901:6053) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:09.901:6053) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:09.901:6053) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4985 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.929:6054) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.929:6054) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.929:6054) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.981:6055) : item=0 name=/dev/.udev/db/block:dm-1 inode=25432 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.981:6055) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:58:09.981:6055) : arch=i386 syscall=open success=yes exit=5 a0=bfae2c7c a1=8000 a2=1b6 a3=806c360 items=1 ppid=4072 pid=4111 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.981:6056) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.981:6056) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.981:6056) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:09.000:5996) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:09.000:5996) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:09.000:5996) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.069:6058) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:10.069:6058) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.069:6058) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.109:6059) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:10.109:6059) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.109:6059) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.121:6060) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:10.121:6060) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.121:6060) : arch=i386 syscall=open success=yes exit=4 a0=8120690 a1=4c000 a2=0 a3=81205e8 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.121:6061) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:10.121:6061) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.121:6061) : arch=i386 syscall=open success=yes exit=4 a0=8120be8 a1=4c000 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.121:6062) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:10.121:6062) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.121:6062) : arch=i386 syscall=open success=yes exit=4 a0=8120910 a1=4c000 a2=0 a3=811fd98 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.121:6063) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:10.121:6063) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.121:6063) : arch=i386 syscall=open success=yes exit=5 a0=8120570 a1=4c000 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.121:6064) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:10.121:6064) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.121:6064) : arch=i386 syscall=open success=yes exit=5 a0=8120728 a1=4c000 a2=0 a3=811fc40 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6065) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:10.125:6065) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6065) : arch=i386 syscall=open success=yes exit=5 a0=8120590 a1=4c000 a2=0 a3=8120480 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6066) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:10.125:6066) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6066) : arch=i386 syscall=open success=yes exit=5 a0=8120930 a1=4c000 a2=0 a3=8120738 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6067) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.125:6067) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6067) : arch=i386 syscall=open success=yes exit=5 a0=8120c08 a1=4c000 a2=0 a3=8120a10 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6068) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:10.125:6068) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6068) : arch=i386 syscall=open success=yes exit=5 a0=8120c28 a1=4c000 a2=0 a3=8120aa8 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6069) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:10.125:6069) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6069) : arch=i386 syscall=open success=yes exit=5 a0=81203a8 a1=4c000 a2=0 a3=81202a8 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6070) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:10.125:6070) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6070) : arch=i386 syscall=open success=yes exit=5 a0=8120198 a1=4c000 a2=0 a3=81200a8 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6071) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:10.125:6071) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6071) : arch=i386 syscall=open success=yes exit=5 a0=8120c48 a1=4c000 a2=0 a3=8120b40 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6072) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:10.125:6072) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6072) : arch=i386 syscall=open success=yes exit=5 a0=8120950 a1=4c000 a2=0 a3=81207d0 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6242) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25512 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6242) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6242) : item=0 name=ram1 block/1:1 
>type=CWD msg=audit(04/20/10 11:58:10.957:6242) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6242) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6073) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:10.125:6073) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6073) : arch=i386 syscall=open success=yes exit=5 a0=8120970 a1=4c000 a2=0 a3=8120868 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6074) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:10.125:6074) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6074) : arch=i386 syscall=open success=yes exit=5 a0=811ff88 a1=4c000 a2=0 a3=811ff00 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6075) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:10.125:6075) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6075) : arch=i386 syscall=open success=yes exit=5 a0=811fc30 a1=4c000 a2=0 a3=811fba8 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6076) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:10.125:6076) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6076) : arch=i386 syscall=open success=yes exit=5 a0=8120098 a1=4c000 a2=0 a3=811fe60 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6077) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:10.125:6077) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6077) : arch=i386 syscall=open success=yes exit=5 a0=8120278 a1=4c000 a2=0 a3=811fa68 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6078) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:10.125:6078) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6078) : arch=i386 syscall=open success=yes exit=5 a0=8120298 a1=4c000 a2=0 a3=811fb08 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6079) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:10.125:6079) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6079) : arch=i386 syscall=open success=yes exit=5 a0=8120a00 a1=4c000 a2=0 a3=81203b8 items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6080) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:10.125:6080) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6080) : arch=i386 syscall=open success=yes exit=5 a0=bfa2dc3c a1=8002 a2=0 a3=bfa2dc3c items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6081) : item=0 name=/dev/mapper/system-home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:10.125:6081) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6081) : arch=i386 syscall=open success=yes exit=6 a0=bfa2de6c a1=8000 a2=0 a3=bfa2de6c items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.125:6082) : item=0 name=/dev/mapper/system-root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:10.125:6082) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.125:6082) : arch=i386 syscall=open success=yes exit=6 a0=bfa2de6c a1=8000 a2=0 a3=bfa2de6c items=1 ppid=4147 pid=4986 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.202:6083) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:10.202:6083) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.202:6083) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4987 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.213:6084) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:10.213:6084) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.213:6084) : arch=i386 syscall=open success=yes exit=3 a0=bf89865c a1=8002 a2=0 a3=bf89865c items=1 ppid=4147 pid=4987 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.265:6085) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:10.265:6085) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.265:6085) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4988 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.273:6086) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:10.273:6086) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.273:6086) : arch=i386 syscall=open success=yes exit=3 a0=bfeef9ec a1=8002 a2=0 a3=bfeef9ec items=1 ppid=4147 pid=4988 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.425:6087) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:10.425:6087) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.425:6087) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.502:6088) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:10.502:6088) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.502:6088) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.565:6089) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:10.565:6089) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.565:6089) : arch=i386 syscall=open success=yes exit=3 a0=bf8758fc a1=8002 a2=0 a3=bf8758fc items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.698:6090) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:10.698:6090) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.698:6090) : arch=i386 syscall=open success=yes exit=4 a0=8120690 a1=4c002 a2=0 a3=81205e8 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.698:6091) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:10.698:6091) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.698:6091) : arch=i386 syscall=open success=yes exit=4 a0=8120be8 a1=4c002 a2=0 a3=811ffc0 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.698:6092) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:10.698:6092) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.698:6092) : arch=i386 syscall=open success=yes exit=4 a0=8120910 a1=4c002 a2=0 a3=811fd98 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.705:6093) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:10.705:6093) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.705:6093) : arch=i386 syscall=open success=yes exit=6 a0=8120570 a1=4c002 a2=0 a3=811fcd8 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.705:6094) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:10.705:6094) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.705:6094) : arch=i386 syscall=open success=yes exit=6 a0=8120728 a1=4c002 a2=0 a3=811fc40 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.709:6095) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.709:6095) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.709:6095) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=4990 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.713:6096) : item=0 name=/dev/.udev/db/block:loop0 inode=25358 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.713:6096) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.713:6096) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8080a68 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.713:6097) : item=1 name=/dev/.udev/watch/204 inode=25357 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.713:6097) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.713:6097) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.713:6097) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807e488 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.717:6098) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:10.717:6098) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.717:6098) : arch=i386 syscall=open success=yes exit=6 a0=8120590 a1=4c002 a2=0 a3=8120480 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.717:6099) : item=0 name=/dev/.udev/db/block:ram1 inode=25263 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.717:6099) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.717:6099) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=807dfa8 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.961:6250) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25514 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.961:6250) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.961:6250) : item=0 name=ram6 block/1:6 
>type=CWD msg=audit(04/20/10 11:58:10.961:6250) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.961:6250) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.965:6251) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.965:6251) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.965:6251) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=5010 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.717:6100) : item=1 name=/dev/.udev/watch/190 inode=25262 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.717:6100) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.717:6100) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.717:6100) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6252) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25511 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6252) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6252) : item=0 name=ram9 block/1:9 
>type=CWD msg=audit(04/20/10 11:58:10.957:6252) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6252) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.961:6253) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.961:6253) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.961:6253) : item=0 name=ram8 block/1:8 
>type=CWD msg=audit(04/20/10 11:58:10.961:6253) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.961:6253) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.721:6101) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:10.721:6101) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.721:6101) : arch=i386 syscall=open success=yes exit=6 a0=8120930 a1=4c002 a2=0 a3=8120738 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.721:6102) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.721:6102) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.721:6102) : arch=i386 syscall=open success=yes exit=6 a0=8120c08 a1=4c002 a2=0 a3=8120a10 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.721:6103) : item=0 name=/dev/.udev/db/block:ram2 inode=25270 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.721:6103) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.721:6103) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807d348 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.721:6104) : item=0 name=/dev/.udev/db/block:ram3 inode=25342 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.721:6104) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.721:6104) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807db10 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.725:6105) : item=1 name=/dev/.udev/watch/203 inode=25341 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.725:6105) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.725:6105) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.725:6105) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.725:6106) : item=1 name=/dev/.udev/watch/191 inode=25269 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.725:6106) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.725:6106) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.725:6106) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080a68 a3=bff1f71c items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6107) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:10.729:6107) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6107) : arch=i386 syscall=open success=yes exit=6 a0=8120c28 a1=4c002 a2=0 a3=8120aa8 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6108) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:10.729:6108) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6108) : arch=i386 syscall=open success=yes exit=6 a0=81203a8 a1=4c002 a2=0 a3=81202a8 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6109) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:10.729:6109) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6109) : arch=i386 syscall=open success=yes exit=6 a0=8120198 a1=4c002 a2=0 a3=81200a8 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6110) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:10.729:6110) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6110) : arch=i386 syscall=open success=yes exit=6 a0=8120c48 a1=4c002 a2=0 a3=8120b40 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6111) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:10.729:6111) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6111) : arch=i386 syscall=open success=yes exit=6 a0=8120950 a1=4c002 a2=0 a3=81207d0 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6112) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:10.729:6112) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6112) : arch=i386 syscall=open success=yes exit=6 a0=8120970 a1=4c002 a2=0 a3=8120868 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6113) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.729:6113) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6113) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=4991 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6114) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:10.729:6114) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6114) : arch=i386 syscall=open success=yes exit=6 a0=811ff88 a1=4c002 a2=0 a3=811ff00 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.961:6255) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25516 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.961:6255) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.961:6255) : item=0 name=ram14 block/1:14 
>type=CWD msg=audit(04/20/10 11:58:10.961:6255) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.961:6255) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.033:6057) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.033:6057) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.033:6057) : arch=i386 syscall=open success=yes exit=3 a0=bffc701c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=4966 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6115) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:10.729:6115) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6115) : arch=i386 syscall=open success=yes exit=6 a0=811fc30 a1=4c002 a2=0 a3=811fba8 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6116) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:10.729:6116) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6116) : arch=i386 syscall=open success=yes exit=6 a0=8120098 a1=4c002 a2=0 a3=811fe60 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6117) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:10.729:6117) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6117) : arch=i386 syscall=open success=yes exit=6 a0=8120278 a1=4c002 a2=0 a3=811fa68 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6118) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:10.729:6118) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6118) : arch=i386 syscall=open success=yes exit=6 a0=8120298 a1=4c002 a2=0 a3=811fb08 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.729:6119) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:10.729:6119) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.729:6119) : arch=i386 syscall=open success=yes exit=6 a0=8120a00 a1=4c002 a2=0 a3=81203b8 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.733:6120) : item=0 name=/dev/.udev/db/block:ram4 inode=25339 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.733:6120) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.733:6120) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807df48 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.733:6121) : item=1 name=/dev/.udev/watch/200 inode=25338 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.733:6121) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.733:6121) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.733:6121) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.737:6122) : item=0 name=/dev/.udev/db/block:ram5 inode=25315 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.737:6122) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.737:6122) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e370 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.737:6123) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.737:6123) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.737:6123) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4742 pid=4994 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.737:6124) : item=1 name=/dev/.udev/watch/199 inode=25314 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.737:6124) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.737:6124) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.737:6124) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=80680e0 a3=bff1f71c items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.741:6125) : item=0 name=/dev/.udev/db/block:ram6 inode=25275 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.741:6125) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.741:6125) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807e7c0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.741:6126) : item=1 name=/dev/.udev/watch/192 inode=25274 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.741:6126) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.741:6126) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.741:6126) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807e370 a3=bff1f71c items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.741:6127) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.741:6127) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.741:6127) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4741 pid=4993 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.745:6128) : item=0 name=/dev/.udev/db/block:ram9 inode=25351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.745:6128) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.745:6128) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f4d0 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.745:6129) : item=0 name=/dev/.udev/db/block:ram7 inode=25285 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.745:6129) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.745:6129) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807ed40 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.749:6130) : item=1 name=/dev/.udev/watch/194 inode=25284 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.749:6130) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.749:6130) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.749:6130) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=807e7c0 a3=bff1f71c items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.749:6131) : item=1 name=/dev/.udev/watch/206 inode=25350 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.749:6131) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.749:6131) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.749:6131) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.749:6132) : item=0 name=/dev/.udev/db/block:ram8 inode=25280 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.749:6132) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.749:6132) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f050 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.749:6133) : item=1 name=/dev/.udev/watch/193 inode=25279 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.749:6133) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.749:6133) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.749:6133) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.753:6134) : item=0 name=/dev/.udev/db/block:ram10 inode=25295 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.753:6134) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.753:6134) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807f950 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.753:6135) : item=1 name=/dev/.udev/watch/196 inode=25294 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.753:6135) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.753:6135) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.753:6135) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8080af8 a3=bff1f71c items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.757:6136) : item=0 name=/dev/.udev/db/block:ram11 inode=25291 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.757:6136) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.757:6136) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068440 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.757:6137) : item=1 name=/dev/.udev/watch/195 inode=25290 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.757:6137) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.757:6137) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.757:6137) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.761:6138) : item=0 name=/dev/.udev/db/block:ram13 inode=25321 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.761:6138) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.761:6138) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=8068d40 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.761:6139) : item=1 name=/dev/.udev/watch/201 inode=25320 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.761:6139) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.761:6139) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.761:6139) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.761:6140) : item=0 name=/dev/.udev/db/block:ram12 inode=25300 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.761:6140) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.761:6140) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80688c0 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.761:6141) : item=1 name=/dev/.udev/watch/197 inode=25299 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.761:6141) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.761:6141) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.761:6141) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.765:6142) : item=0 name=/dev/.udev/db/block:ram15 inode=25305 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.765:6142) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.765:6142) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=8083f58 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.765:6143) : item=0 name=/dev/.udev/db/block:ram14 inode=25346 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.765:6143) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.765:6143) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=80691c0 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.765:6144) : item=1 name=/dev/.udev/watch/198 inode=25304 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.765:6144) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.765:6144) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.765:6144) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8084148 a3=bff1f71c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.765:6145) : item=1 name=/dev/.udev/watch/205 inode=25345 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.765:6145) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.765:6145) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.765:6145) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068050 a3=bff1f71c items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.777:6146) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.777:6146) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.777:6146) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4743 pid=4995 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.781:6147) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:10.781:6147) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:10.781:6147) : arch=i386 syscall=open success=yes exit=6 a0=80efc43 a1=8000 a2=0 a3=20 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.781:6148) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.781:6148) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.781:6148) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5003 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.789:6149) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.789:6149) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.789:6149) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4759 pid=5002 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.793:6150) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:10.793:6150) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.793:6150) : arch=i386 syscall=open success=yes exit=3 a0=bffb3f1b a1=8800 a2=0 a3=bffb3f1b items=1 ppid=1911 pid=4990 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=ata_id exe=/lib/udev/ata_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.793:6151) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.793:6151) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.793:6151) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4745 pid=4996 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.797:6152) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.797:6152) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.797:6152) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4757 pid=5006 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.797:6153) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.797:6153) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.797:6153) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4747 pid=4997 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.801:6154) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.801:6154) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.801:6154) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4756 pid=4999 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.805:6155) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.805:6155) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.805:6155) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4749 pid=5000 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.805:6156) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.805:6156) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.805:6156) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4744 pid=5005 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.805:6157) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.805:6157) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.805:6157) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4760 pid=5004 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.809:6158) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.809:6158) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.809:6158) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4750 pid=5001 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.809:6159) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.809:6159) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.809:6159) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4755 pid=4998 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.813:6160) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.813:6160) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.813:6160) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=4992 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.821:6161) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.821:6161) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.821:6161) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4758 pid=5007 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.837:6162) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.837:6162) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.837:6162) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=5008 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.857:6163) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:10.857:6163) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.857:6163) : arch=i386 syscall=open success=yes exit=3 a0=bfa7fefc a1=8800 a2=0 a3=bfa802b4 items=1 ppid=1911 pid=5008 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.857:6164) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:10.857:6164) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.857:6164) : arch=i386 syscall=open success=yes exit=3 a0=bfa7fefc a1=8800 a2=0 a3=8052008 items=1 ppid=1911 pid=5008 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=scsi_id exe=/lib/udev/scsi_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.861:6165) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.861:6165) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.861:6165) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=5009 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.881:6166) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:10.881:6166) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.881:6166) : arch=i386 syscall=open success=yes exit=3 a0=bfe2ff4b a1=8000 a2=0 a3=804f008 items=1 ppid=4741 pid=4993 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.889:6167) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:10.889:6167) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.889:6167) : arch=i386 syscall=open success=yes exit=3 a0=bfa12f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4749 pid=5000 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.893:6168) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:10.893:6168) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.893:6168) : arch=i386 syscall=open success=yes exit=3 a0=bf948f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4743 pid=4995 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.905:6169) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:10.905:6169) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.905:6169) : arch=i386 syscall=open success=yes exit=3 a0=bfb9bf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4750 pid=5001 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.905:6170) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:10.905:6170) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.905:6170) : arch=i386 syscall=open success=yes exit=3 a0=bfef8f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4757 pid=5006 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.909:6171) : item=0 name=/dev/loop0 inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:10.909:6171) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.909:6171) : arch=i386 syscall=open success=yes exit=3 a0=bff61f3e a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=4992 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.917:6172) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:10.917:6172) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.917:6172) : arch=i386 syscall=open success=yes exit=3 a0=bfcbbf4b a1=8000 a2=0 a3=804f008 items=1 ppid=4744 pid=5005 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.921:6173) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:10.921:6173) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.921:6173) : arch=i386 syscall=open success=yes exit=3 a0=bfeb1f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4759 pid=5002 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.925:6174) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:10.925:6174) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.925:6174) : arch=i386 syscall=open success=yes exit=3 a0=bffdef46 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5003 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.925:6175) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:10.925:6175) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.925:6175) : arch=i386 syscall=open success=yes exit=3 a0=bf86ff4b a1=8000 a2=0 a3=804f008 items=1 ppid=4742 pid=4994 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.925:6176) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:10.925:6176) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.925:6176) : arch=i386 syscall=open success=yes exit=3 a0=bfea7f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4747 pid=4997 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.929:6177) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:10.929:6177) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.929:6177) : arch=i386 syscall=open success=yes exit=3 a0=bf9e5f46 a1=8000 a2=0 a3=804f008 items=1 ppid=4756 pid=4999 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.929:6178) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:10.929:6178) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.929:6178) : arch=i386 syscall=open success=yes exit=3 a0=bfdc0f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4745 pid=4996 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.933:6179) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:10.933:6179) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.933:6179) : arch=i386 syscall=open success=yes exit=3 a0=bff85f4b a1=8000 a2=0 a3=804f008 items=1 ppid=4755 pid=4998 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.937:6180) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25474 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6180) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6180) : item=0 name=ram15 block/1:15 
>type=CWD msg=audit(04/20/10 11:58:10.937:6180) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.937:6180) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.937:6181) : item=4 name=/dev/.udev/db/block:ram15 inode=25474 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6181) : item=3 name=/dev/.udev/db/block:ram15 inode=25305 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6181) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25474 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6181) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6181) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.937:6181) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.937:6181) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.937:6182) : item=0 name=/dev/block/1:15 inode=3927 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.937:6182) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.937:6182) : arch=i386 syscall=readlink success=yes exit=8 a0=8083e68 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.937:6183) : item=0 name=/dev/.udev/watch/211 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.937:6183) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.937:6183) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807fcd0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.937:6184) : item=2 name=/dev/.udev/watch/211 inode=25477 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6184) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6184) : item=0 name=/devices/virtual/block/ram15 
>type=CWD msg=audit(04/20/10 11:58:10.937:6184) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.937:6184) : arch=i386 syscall=symlink success=yes exit=0 a0=80794f4 a1=bff1fbfc a2=8068008 a3=807fcd0 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.937:6185) : item=1 name=/dev/.udev/db/block:ram15.tmp inode=25478 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6185) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.937:6185) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.937:6185) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=8083f58 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.937:6186) : item=4 name=/dev/.udev/db/block:ram15 inode=25478 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6186) : item=3 name=/dev/.udev/db/block:ram15 inode=25474 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6186) : item=2 name=/dev/.udev/db/block:ram15.tmp inode=25478 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6186) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.937:6186) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.937:6186) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.937:6186) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.941:6187) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:10.941:6187) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.941:6187) : arch=i386 syscall=open success=yes exit=3 a0=bfa8bf46 a1=8000 a2=0 a3=804f008 items=1 ppid=4760 pid=5004 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.945:6188) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:10.945:6188) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.945:6188) : arch=i386 syscall=open success=yes exit=3 a0=bfd0df46 a1=8000 a2=0 a3=804f008 items=1 ppid=4758 pid=5007 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.945:6189) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25480 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.945:6189) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.945:6189) : item=0 name=ram12 block/1:12 
>type=CWD msg=audit(04/20/10 11:58:10.945:6189) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.945:6189) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6190) : item=4 name=/dev/.udev/db/block:ram12 inode=25480 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6190) : item=3 name=/dev/.udev/db/block:ram12 inode=25300 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6190) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25480 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6190) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6190) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6190) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6190) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6191) : item=0 name=/dev/block/1:12 inode=3902 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6191) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6191) : arch=i386 syscall=readlink success=yes exit=8 a0=8080498 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6192) : item=0 name=/dev/.udev/watch/212 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6192) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6192) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068440 items=1 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6193) : item=2 name=/dev/.udev/watch/212 inode=25483 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6193) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6193) : item=0 name=/devices/virtual/block/ram12 
>type=CWD msg=audit(04/20/10 11:58:10.949:6193) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6193) : arch=i386 syscall=symlink success=yes exit=0 a0=8068564 a1=bff1fbfc a2=8068008 a3=8068440 items=3 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6194) : item=1 name=/dev/.udev/db/block:ram12.tmp inode=25484 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6194) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6194) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6194) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8069c68 items=2 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6195) : item=4 name=/dev/.udev/db/block:ram12 inode=25484 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6195) : item=3 name=/dev/.udev/db/block:ram12 inode=25480 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6195) : item=2 name=/dev/.udev/db/block:ram12.tmp inode=25484 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6195) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6195) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6195) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6195) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4758 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6196) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25485 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6196) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6196) : item=0 name=ram11 block/1:11 
>type=CWD msg=audit(04/20/10 11:58:10.949:6196) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6196) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6197) : item=4 name=/dev/.udev/db/block:ram11 inode=25485 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6197) : item=3 name=/dev/.udev/db/block:ram11 inode=25291 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6197) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25485 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6197) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6197) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6197) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6197) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6198) : item=0 name=/dev/block/1:11 inode=3907 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6198) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6198) : arch=i386 syscall=readlink success=yes exit=8 a0=807fb90 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6199) : item=0 name=/dev/.udev/watch/213 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6199) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6199) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f950 items=1 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6200) : item=2 name=/dev/.udev/watch/213 inode=25488 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6200) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6200) : item=0 name=/devices/virtual/block/ram11 
>type=CWD msg=audit(04/20/10 11:58:10.949:6200) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6200) : arch=i386 syscall=symlink success=yes exit=0 a0=807fa74 a1=bff1fbfc a2=8068008 a3=807f950 items=3 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6201) : item=1 name=/dev/.udev/db/block:ram11.tmp inode=25489 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6201) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6201) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6201) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=80697e8 items=2 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.949:6202) : item=4 name=/dev/.udev/db/block:ram11 inode=25489 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6202) : item=3 name=/dev/.udev/db/block:ram11 inode=25485 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6202) : item=2 name=/dev/.udev/db/block:ram11.tmp inode=25489 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6202) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.949:6202) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.949:6202) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.949:6202) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4757 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6203) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25490 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6203) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6203) : item=0 name=ram3 block/1:3 
>type=CWD msg=audit(04/20/10 11:58:10.953:6203) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6203) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6204) : item=4 name=/dev/.udev/db/block:ram3 inode=25490 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6204) : item=3 name=/dev/.udev/db/block:ram3 inode=25342 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6204) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25490 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6204) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6204) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6204) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6204) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6205) : item=0 name=/dev/block/1:3 inode=3947 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6205) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6205) : arch=i386 syscall=readlink success=yes exit=7 a0=80803c8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6206) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25493 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6206) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6206) : item=0 name=ram2 block/1:2 
>type=CWD msg=audit(04/20/10 11:58:10.953:6206) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6206) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6207) : item=0 name=/dev/.udev/watch/214 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6207) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6207) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807d700 items=1 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6208) : item=2 name=/dev/.udev/watch/214 inode=25494 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6208) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6208) : item=0 name=/devices/virtual/block/ram3 
>type=CWD msg=audit(04/20/10 11:58:10.953:6208) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6208) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=807d700 items=3 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6209) : item=4 name=/dev/.udev/db/block:ram2 inode=25493 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6209) : item=3 name=/dev/.udev/db/block:ram2 inode=25270 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6209) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25493 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6209) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6209) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6209) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6209) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6210) : item=1 name=/dev/.udev/db/block:ram3.tmp inode=25495 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6210) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6210) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6210) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807eb18 items=2 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6211) : item=0 name=/dev/block/1:2 inode=3876 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6211) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6211) : arch=i386 syscall=readlink success=yes exit=7 a0=80807f8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6212) : item=0 name=/dev/.udev/watch/215 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6212) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6212) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807cd68 items=1 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6213) : item=4 name=/dev/.udev/db/block:ram3 inode=25495 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6213) : item=3 name=/dev/.udev/db/block:ram3 inode=25490 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6213) : item=2 name=/dev/.udev/db/block:ram3.tmp inode=25495 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6213) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6213) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6213) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6213) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4743 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6214) : item=2 name=/dev/.udev/watch/215 inode=25498 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6214) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6214) : item=0 name=/devices/virtual/block/ram2 
>type=CWD msg=audit(04/20/10 11:58:10.953:6214) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6214) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=807cd68 items=3 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6215) : item=1 name=/dev/.udev/db/block:ram2.tmp inode=25499 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6215) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6215) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6215) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807e730 items=2 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6216) : item=4 name=/dev/.udev/db/block:ram2 inode=25499 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6216) : item=3 name=/dev/.udev/db/block:ram2 inode=25493 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6216) : item=2 name=/dev/.udev/db/block:ram2.tmp inode=25499 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6216) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6216) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6216) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6216) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4742 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6217) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25500 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6217) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6217) : item=0 name=ram13 block/1:13 
>type=CWD msg=audit(04/20/10 11:58:10.953:6217) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6217) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6218) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25501 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6218) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6218) : item=0 name=ram5 block/1:5 
>type=CWD msg=audit(04/20/10 11:58:10.953:6218) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6218) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6219) : item=4 name=/dev/.udev/db/block:ram13 inode=25500 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6219) : item=3 name=/dev/.udev/db/block:ram13 inode=25321 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6219) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25500 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6219) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6219) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6219) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6219) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6220) : item=4 name=/dev/.udev/db/block:ram5 inode=25501 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6220) : item=3 name=/dev/.udev/db/block:ram5 inode=25315 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6220) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25501 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6220) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.953:6220) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6220) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6220) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6221) : item=0 name=/dev/block/1:13 inode=3939 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6221) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6221) : arch=i386 syscall=readlink success=yes exit=8 a0=80805d8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.953:6222) : item=0 name=/dev/block/1:5 inode=3897 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.953:6222) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.953:6222) : arch=i386 syscall=readlink success=yes exit=7 a0=8079ad0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6223) : item=0 name=/dev/.udev/watch/216 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.957:6223) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6223) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807df48 items=1 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6224) : item=0 name=/dev/.udev/watch/217 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.957:6224) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6224) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80688c0 items=1 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6225) : item=2 name=/dev/.udev/watch/217 inode=25506 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6225) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6225) : item=0 name=/devices/virtual/block/ram13 
>type=CWD msg=audit(04/20/10 11:58:10.957:6225) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6225) : arch=i386 syscall=symlink success=yes exit=0 a0=8068a3c a1=bff1fbfc a2=8068008 a3=80688c0 items=3 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6226) : item=1 name=/dev/.udev/db/block:ram13.tmp inode=25507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6226) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.957:6226) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6226) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a0e8 items=2 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6227) : item=2 name=/dev/.udev/watch/216 inode=25508 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6227) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6227) : item=0 name=/devices/virtual/block/ram5 
>type=CWD msg=audit(04/20/10 11:58:10.957:6227) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6227) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807df48 items=3 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6228) : item=4 name=/dev/.udev/db/block:ram13 inode=25507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6228) : item=3 name=/dev/.udev/db/block:ram13 inode=25500 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6228) : item=2 name=/dev/.udev/db/block:ram13.tmp inode=25507 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6228) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6228) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.957:6228) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6228) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4759 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6229) : item=1 name=/dev/.udev/db/block:ram5.tmp inode=25509 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6229) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.957:6229) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6229) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f378 items=2 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6230) : item=4 name=/dev/.udev/db/block:ram5 inode=25509 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6230) : item=3 name=/dev/.udev/db/block:ram5 inode=25501 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6230) : item=2 name=/dev/.udev/db/block:ram5.tmp inode=25509 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6230) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6230) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:10.957:6230) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6230) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4745 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.957:6231) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25510 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6231) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.957:6231) : item=0 name=ram10 block/1:10 
>type=CWD msg=audit(04/20/10 11:58:10.957:6231) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.957:6231) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.965:6232) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.965:6232) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.965:6232) : item=0 name=ram4 block/1:4 
>type=CWD msg=audit(04/20/10 11:58:10.965:6232) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.965:6232) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:10.961:6233) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25513 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.961:6233) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:10.961:6233) : item=0 name=ram7 block/1:7 
>type=CWD msg=audit(04/20/10 11:58:10.961:6233) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:10.961:6233) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1fa24 a1=bff1f224 a2=8066ff4 a3=0 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.082:6235) : item=0 name=/dev/block/1:4 inode=3922 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.082:6235) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.082:6235) : arch=i386 syscall=readlink success=yes exit=7 a0=8079a28 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.045:6236) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:11.045:6236) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.045:6236) : arch=i386 syscall=open success=yes exit=3 a0=bff66f4b a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=4991 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.082:6237) : item=0 name=/dev/.udev/watch/218 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.082:6237) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.082:6237) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807db20 items=1 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.082:6238) : item=2 name=/dev/.udev/watch/218 inode=25521 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6238) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6238) : item=0 name=/devices/virtual/block/ram4 
>type=CWD msg=audit(04/20/10 11:58:11.082:6238) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.082:6238) : arch=i386 syscall=symlink success=yes exit=0 a0=8079d74 a1=bff1fbfc a2=8068008 a3=807db20 items=3 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.082:6239) : item=1 name=/dev/.udev/db/block:ram4.tmp inode=25522 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6239) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.082:6239) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.082:6239) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ef50 items=2 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.082:6240) : item=4 name=/dev/.udev/db/block:ram7 inode=25513 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6240) : item=3 name=/dev/.udev/db/block:ram7 inode=25285 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6240) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25513 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6240) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6240) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.082:6240) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.082:6240) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.082:6241) : item=4 name=/dev/.udev/db/block:ram4 inode=25522 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6241) : item=3 name=/dev/.udev/db/block:ram4 inode=25517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6241) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25522 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6241) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.082:6241) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.082:6241) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.082:6241) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.013:6243) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.013:6243) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.013:6243) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=5011 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.106:6244) : item=4 name=/dev/.udev/db/block:ram10 inode=25510 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6244) : item=3 name=/dev/.udev/db/block:ram10 inode=25295 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6244) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25510 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6244) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6244) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.106:6244) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.106:6244) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.106:6245) : item=0 name=/dev/block/1:10 inode=3932 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.106:6245) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.106:6245) : arch=i386 syscall=readlink success=yes exit=8 a0=80807f8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.106:6246) : item=0 name=/dev/.udev/watch/220 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.106:6246) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.106:6246) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f4d0 items=1 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.106:6247) : item=2 name=/dev/.udev/watch/220 inode=25530 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6247) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6247) : item=0 name=/devices/virtual/block/ram10 
>type=CWD msg=audit(04/20/10 11:58:11.106:6247) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.106:6247) : arch=i386 syscall=symlink success=yes exit=0 a0=807f5f4 a1=bff1fbfc a2=8068008 a3=807f4d0 items=3 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.106:6248) : item=1 name=/dev/.udev/db/block:ram10.tmp inode=25531 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6248) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.106:6248) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.106:6248) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f950 items=2 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.106:6249) : item=4 name=/dev/.udev/db/block:ram10 inode=25531 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6249) : item=3 name=/dev/.udev/db/block:ram10 inode=25510 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6249) : item=2 name=/dev/.udev/db/block:ram10.tmp inode=25531 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6249) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.106:6249) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.106:6249) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.106:6249) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4756 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.154:6254) : item=4 name=/dev/.udev/db/block:ram8 inode=25515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6254) : item=3 name=/dev/.udev/db/block:ram8 inode=25280 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6254) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6254) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6254) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.154:6254) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.154:6254) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.154:6256) : item=0 name=/dev/block/1:8 inode=3952 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.154:6256) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.154:6256) : arch=i386 syscall=readlink success=yes exit=7 a0=80803c8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.154:6257) : item=4 name=/dev/.udev/db/block:ram14 inode=25516 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6257) : item=3 name=/dev/.udev/db/block:ram14 inode=25346 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6257) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25516 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6257) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6257) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.154:6257) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.154:6257) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.154:6258) : item=0 name=/dev/block/1:14 inode=3912 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.154:6258) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.154:6258) : arch=i386 syscall=readlink success=yes exit=8 a0=8080958 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.154:6259) : item=0 name=/dev/.udev/watch/221 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.154:6259) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.154:6259) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eba8 items=1 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.154:6260) : item=2 name=/dev/.udev/watch/221 inode=25534 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6260) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6260) : item=0 name=/devices/virtual/block/ram8 
>type=CWD msg=audit(04/20/10 11:58:11.154:6260) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.154:6260) : arch=i386 syscall=symlink success=yes exit=0 a0=806818c a1=bff1fbfc a2=8068008 a3=807eba8 items=3 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.154:6261) : item=1 name=/dev/.udev/db/block:ram8.tmp inode=25535 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6261) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.154:6261) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.154:6261) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f050 items=2 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.154:6262) : item=4 name=/dev/.udev/db/block:ram9 inode=25511 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6262) : item=3 name=/dev/.udev/db/block:ram9 inode=25351 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6262) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25511 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6262) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.154:6262) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.154:6262) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.154:6262) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.170:6263) : item=4 name=/dev/.udev/db/block:ram6 inode=25514 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.170:6263) : item=3 name=/dev/.udev/db/block:ram6 inode=25275 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.170:6263) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25514 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.170:6263) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.170:6263) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.170:6263) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.170:6263) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.118:6264) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:11.118:6264) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.118:6264) : arch=i386 syscall=open success=yes exit=3 a0=bfdc0c69 a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=5011 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.198:6265) : item=4 name=/dev/.udev/db/block:ram1 inode=25512 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6265) : item=3 name=/dev/.udev/db/block:ram1 inode=25263 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6265) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25512 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6265) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6265) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.198:6265) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.198:6265) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.198:6266) : item=0 name=/dev/block/1:1 inode=3882 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.198:6266) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.198:6266) : arch=i386 syscall=readlink success=yes exit=7 a0=8079338 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.198:6267) : item=0 name=/dev/.udev/watch/223 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.198:6267) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.198:6267) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80793a0 items=1 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.198:6268) : item=2 name=/dev/.udev/watch/223 inode=25541 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6268) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6268) : item=0 name=/devices/virtual/block/ram1 
>type=CWD msg=audit(04/20/10 11:58:11.198:6268) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.198:6268) : arch=i386 syscall=symlink success=yes exit=0 a0=8079dcc a1=bff1fbfc a2=8068008 a3=80793a0 items=3 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.198:6269) : item=1 name=/dev/.udev/db/block:ram1.tmp inode=25542 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6269) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.198:6269) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.198:6269) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=807dbb8 items=2 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.198:6270) : item=4 name=/dev/.udev/db/block:ram1 inode=25542 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6270) : item=3 name=/dev/.udev/db/block:ram1 inode=25512 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6270) : item=2 name=/dev/.udev/db/block:ram1.tmp inode=25542 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6270) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.198:6270) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.198:6270) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.198:6270) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4741 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.198:6271) : item=0 name=/dev/block/1:9 inode=3940 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.198:6271) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.198:6271) : arch=i386 syscall=readlink success=yes exit=7 a0=807c850 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.166:6272) : item=1 name=/dev/.udev/db/block:loop0.tmp inode=25538 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.166:6272) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.166:6272) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.166:6272) : arch=i386 syscall=open success=yes exit=3 a0=bff1f224 a1=8241 a2=1b6 a3=8080a68 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.158:6273) : item=0 name=/dev/.udev/watch/222 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.158:6273) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.158:6273) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8068d40 items=1 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.225:6274) : item=2 name=/dev/.udev/watch/222 inode=25550 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6274) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6274) : item=0 name=/devices/virtual/block/ram14 
>type=CWD msg=audit(04/20/10 11:58:11.225:6274) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.225:6274) : arch=i386 syscall=symlink success=yes exit=0 a0=8068e64 a1=bff1fbfc a2=8068008 a3=8068d40 items=3 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.225:6275) : item=1 name=/dev/.udev/db/block:ram14.tmp inode=25551 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6275) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.225:6275) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.225:6275) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=806a568 items=2 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.225:6276) : item=4 name=/dev/.udev/db/block:ram14 inode=25551 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6276) : item=3 name=/dev/.udev/db/block:ram14 inode=25516 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6276) : item=2 name=/dev/.udev/db/block:ram14.tmp inode=25551 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6276) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6276) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.225:6276) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.225:6276) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4760 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.233:6277) : item=4 name=/dev/.udev/db/block:ram8 inode=25535 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6277) : item=3 name=/dev/.udev/db/block:ram8 inode=25515 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6277) : item=2 name=/dev/.udev/db/block:ram8.tmp inode=25535 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6277) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6277) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.233:6277) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.233:6277) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4750 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.233:6278) : item=0 name=/dev/.udev/watch/224 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.233:6278) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.233:6278) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807f050 items=1 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.233:6279) : item=2 name=/dev/.udev/watch/224 inode=25554 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6279) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6279) : item=0 name=/devices/virtual/block/ram9 
>type=CWD msg=audit(04/20/10 11:58:11.233:6279) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.233:6279) : arch=i386 syscall=symlink success=yes exit=0 a0=807f1cc a1=bff1fbfc a2=8068008 a3=807f050 items=3 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.233:6280) : item=1 name=/dev/.udev/db/block:ram9.tmp inode=25555 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6280) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.233:6280) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.233:6280) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f4d0 items=2 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.233:6281) : item=4 name=/dev/.udev/db/block:ram9 inode=25555 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6281) : item=3 name=/dev/.udev/db/block:ram9 inode=25511 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6281) : item=2 name=/dev/.udev/db/block:ram9.tmp inode=25555 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6281) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.233:6281) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.233:6281) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.233:6281) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4755 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.202:6282) : item=0 name=/dev/block/1:7 inode=3917 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.202:6282) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.202:6282) : arch=i386 syscall=readlink success=yes exit=7 a0=8079260 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.237:6283) : item=0 name=/dev/.udev/watch/225 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.237:6283) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.237:6283) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807eb98 items=1 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.237:6284) : item=2 name=/dev/.udev/watch/225 inode=25558 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.237:6284) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.237:6284) : item=0 name=/devices/virtual/block/ram7 
>type=CWD msg=audit(04/20/10 11:58:11.237:6284) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.237:6284) : arch=i386 syscall=symlink success=yes exit=0 a0=807e894 a1=bff1fbfc a2=8068008 a3=807eb98 items=3 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.237:6285) : item=1 name=/dev/.udev/db/block:ram7.tmp inode=25559 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.237:6285) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.237:6285) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.237:6285) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807ed40 items=2 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.237:6286) : item=4 name=/dev/.udev/db/block:ram7 inode=25559 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.237:6286) : item=3 name=/dev/.udev/db/block:ram7 inode=25513 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.237:6286) : item=2 name=/dev/.udev/db/block:ram7.tmp inode=25559 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.237:6286) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.237:6286) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.237:6286) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.237:6286) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4749 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.225:6287) : item=4 name=/dev/.udev/db/block:loop0 inode=25538 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6287) : item=3 name=/dev/.udev/db/block:loop0 inode=25358 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6287) : item=2 name=/dev/.udev/db/block:loop0.tmp inode=25538 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6287) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.225:6287) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.225:6287) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.225:6287) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6288) : item=0 name=/dev/.udev/links/root inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6288) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6288) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=807e628 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6289) : item=0 name=/dev/root inode=5780 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6289) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6289) : arch=i386 syscall=readlink success=yes exit=5 a0=8080018 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6290) : item=1 name=/dev/.udev/links/root/b7:0 inode=5782 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6290) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:58:11.262:6290) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6290) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=806861c a1=bff1da7c a2=807e628 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6291) : item=0 name=/dev/block/7:0 inode=4679 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6291) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6291) : arch=i386 syscall=readlink success=yes exit=8 a0=8068360 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6292) : item=0 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6292) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6292) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=807e628 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6293) : item=0 name=/dev/disk/by-uuid/32788f6d-b5ae-439c-b677-b97c31aedf46 inode=4681 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6293) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6293) : arch=i386 syscall=readlink success=yes exit=11 a0=8079968 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6294) : item=1 name=/dev/.udev/links/disk\x2fby-uuid\x2f32788f6d-b5ae-439c-b677-b97c31aedf46/b7:0 inode=5784 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6294) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:58:11.262:6294) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6294) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=806861c a1=bff1da7c a2=807e628 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6295) : item=0 name=/dev/block/1:6 inode=3887 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6295) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6295) : arch=i386 syscall=readlink success=yes exit=7 a0=807b560 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6296) : item=0 name=/dev/.udev/watch/226 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6296) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6296) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807e628 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6297) : item=2 name=/dev/.udev/watch/226 inode=25562 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6297) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6297) : item=0 name=/devices/virtual/block/loop0 
>type=CWD msg=audit(04/20/10 11:58:11.262:6297) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6297) : arch=i386 syscall=symlink success=yes exit=0 a0=806861c a1=bff1fbfc a2=8068008 a3=807e628 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6298) : item=1 name=/dev/.udev/db/block:loop0.tmp inode=25563 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6298) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6298) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6298) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807a2a0 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6299) : item=4 name=/dev/.udev/db/block:loop0 inode=25563 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6299) : item=3 name=/dev/.udev/db/block:loop0 inode=25538 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6299) : item=2 name=/dev/.udev/db/block:loop0.tmp inode=25563 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6299) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6299) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6299) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6299) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6300) : item=0 name=/dev/.udev/watch/227 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6300) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6300) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80680c0 items=1 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6301) : item=2 name=/dev/.udev/watch/227 inode=25566 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6301) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6301) : item=0 name=/devices/virtual/block/ram6 
>type=CWD msg=audit(04/20/10 11:58:11.262:6301) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6301) : arch=i386 syscall=symlink success=yes exit=0 a0=8079b94 a1=bff1fbfc a2=8068008 a3=80680c0 items=3 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6302) : item=1 name=/dev/.udev/db/block:ram6.tmp inode=25567 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6302) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6302) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6302) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=807f7c8 items=2 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.262:6303) : item=4 name=/dev/.udev/db/block:ram6 inode=25567 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6303) : item=3 name=/dev/.udev/db/block:ram6 inode=25514 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6303) : item=2 name=/dev/.udev/db/block:ram6.tmp inode=25567 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6303) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.262:6303) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.262:6303) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.262:6303) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4747 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.241:6304) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.241:6304) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.241:6304) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5012 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.298:6305) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:11.298:6305) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.298:6305) : arch=i386 syscall=open success=yes exit=3 a0=bf957d9c a1=8002 a2=0 a3=bf957d9c items=1 ppid=1510 pid=5012 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.314:6306) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.314:6306) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.314:6306) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=5013 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.330:6307) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.330:6307) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.330:6307) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5015 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.330:6308) : item=1 name=/dev/mapper/system-swap inode=25572 dev=00:0e mode=block,640 ouid=root ogid=root rdev=fd:02 
>type=PATH msg=audit(04/20/10 11:58:11.330:6308) : item=0 name=/dev/mapper/ inode=3979 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.330:6308) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.330:6308) : arch=i386 syscall=mknod success=yes exit=0 a0=bf87478c a1=61a0 a2=fd02 a3=fd02 items=2 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.330:6309) : item=0 name=/dev/mapper/system-swap inode=25572 dev=00:0e mode=block,640 ouid=root ogid=root rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:58:11.330:6309) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.330:6309) : arch=i386 syscall=chown32 success=yes exit=0 a0=bf87478c a1=0 a2=6 a3=fd02 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.330:6310) : item=0 name=/dev/mapper/system-swap inode=25572 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:58:11.330:6310) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.330:6310) : arch=i386 syscall=open success=yes exit=3 a0=bf87472c a1=8000 a2=0 a3=bf87472c items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.330:6311) : item=0 name=/dev/mapper/system-swap inode=25572 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:58:11.330:6311) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.330:6311) : arch=i386 syscall=open success=yes exit=3 a0=bf87478c a1=8000 a2=0 a3=bf87478c items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.330:6312) : item=2 name=/dev/system/swap inode=25573 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.330:6312) : item=1 name=/dev/system/ inode=25006 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.330:6312) : item=0 name=/dev/mapper/system-swap 
>type=CWD msg=audit(04/20/10 11:58:11.330:6312) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.330:6312) : arch=i386 syscall=symlink success=yes exit=0 a0=bf8737dc a1=bf8747dc a2=8106ff4 a3=bf8717dc items=3 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.330:6313) : item=0 name=/dev/system/swap inode=25572 dev=00:0e mode=block,640 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:58:11.330:6313) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.330:6313) : arch=i386 syscall=open success=yes exit=3 a0=8120d38 a1=4c002 a2=0 a3=8120cb0 items=1 ppid=4147 pid=4989 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=lvcreate exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.339:6314) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:11.339:6314) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.339:6314) : arch=i386 syscall=open success=yes exit=4 a0=bfa3dc4d a1=8000 a2=0 a3=1 items=1 ppid=1911 pid=5013 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=edd_id exe=/lib/udev/edd_id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.342:6315) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.342:6315) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.342:6315) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=5016 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.370:6316) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:11.370:6316) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.370:6316) : arch=i386 syscall=open success=yes exit=3 a0=bf8ce96c a1=8002 a2=0 a3=bf8ce96c items=1 ppid=1510 pid=5015 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.389:6317) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.389:6317) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.389:6317) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5017 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.417:6318) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.417:6318) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.417:6318) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5019 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.433:6319) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:11.433:6319) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.433:6319) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.441:6320) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.441:6320) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.441:6320) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.465:6321) : item=0 name=/dev/.udev/db/block:sda inode=25379 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.465:6321) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.465:6321) : arch=i386 syscall=open success=yes exit=3 a0=bf9e6d8c a1=8000 a2=1b6 a3=8055158 items=1 ppid=1911 pid=5016 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.465:6322) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:11.465:6322) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.465:6322) : arch=i386 syscall=open success=yes exit=3 a0=8053180 a1=0 a2=8054408 a3=80522e0 items=1 ppid=1911 pid=5016 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.469:6323) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.469:6323) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.469:6323) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=5020 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.489:6324) : item=0 name=/dev/.tmp-block-253:2 inode=25580 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:58:11.489:6324) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.489:6324) : arch=i386 syscall=open success=yes exit=3 a0=bff36d4b a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5019 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.493:6325) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.493:6325) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.493:6325) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.493:6326) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:11.493:6326) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.493:6326) : arch=i386 syscall=open success=yes exit=3 a0=804b690 a1=88900 a2=0 a3=8 items=1 ppid=1911 pid=5020 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.497:6327) : item=0 name=/dev/.udev/db/block:sda inode=25379 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.497:6327) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.497:6327) : arch=i386 syscall=open success=yes exit=4 a0=bfc76d9c a1=8000 a2=1b6 a3=804bb80 items=1 ppid=1911 pid=5020 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-probe-at exe=/lib/udev/udisks-probe-ata-smart key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.533:6328) : item=0 name=/dev/.udev/db/block:sda2 inode=25396 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.533:6328) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.533:6328) : arch=i386 syscall=open success=yes exit=3 a0=bff1f70c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.537:6329) : item=1 name=/dev/.udev/watch/209 inode=25395 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.537:6329) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.537:6329) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.537:6329) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8068210 a3=bff1f71c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.537:6330) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.537:6330) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.537:6330) : arch=i386 syscall=open success=yes exit=3 a0=bff1d98c a1=8000 a2=1b6 a3=807a2a0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.545:6331) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.545:6331) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.545:6331) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.553:6332) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.553:6332) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.553:6332) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=5022 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.565:6333) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.565:6333) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.565:6333) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=5021 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.577:6334) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.577:6334) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.577:6334) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5023 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.593:6335) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:11.593:6335) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.593:6335) : arch=i386 syscall=open success=yes exit=3 a0=bfd2dc2a a1=8000 a2=0 a3=804f008 items=1 ppid=1911 pid=5021 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.601:6336) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.601:6336) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.601:6336) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.613:6337) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:11.613:6337) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.613:6337) : arch=i386 syscall=open success=yes exit=3 a0=bf8ffc2a a1=8000 a2=0 a3=804f008 items=1 ppid=4740 pid=5022 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.621:6338) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.621:6338) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.621:6338) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=5024 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.625:6339) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.625:6339) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.625:6339) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1911 pid=5025 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.629:6340) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:11.629:6340) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.629:6340) : arch=i386 syscall=open success=yes exit=3 a0=bfa78dcc a1=8002 a2=0 a3=bfa78dcc items=1 ppid=1510 pid=5023 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.641:6341) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.641:6341) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.641:6341) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4740 pid=5026 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.645:6342) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.645:6342) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.645:6342) : arch=i386 syscall=open success=yes exit=3 a0=bfdfadac a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1911 pid=5025 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.645:6343) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.645:6343) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.645:6343) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5027 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.649:6344) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.649:6344) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.649:6344) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.649:6345) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:11.649:6345) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.649:6345) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1911 pid=5025 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.657:6346) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.657:6346) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.657:6346) : arch=i386 syscall=open success=yes exit=3 a0=bfe32e1c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=4740 pid=5026 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.657:6347) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:11.657:6347) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.657:6347) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=4740 pid=5026 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6348) : item=1 name=/dev/.udev/db/block:sda2.tmp inode=25599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6348) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6348) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6348) : arch=i386 syscall=open success=yes exit=3 a0=bff1f224 a1=8241 a2=1b6 a3=8068810 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6349) : item=4 name=/dev/.udev/db/block:sda2 inode=25599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6349) : item=3 name=/dev/.udev/db/block:sda2 inode=25396 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6349) : item=2 name=/dev/.udev/db/block:sda2.tmp inode=25599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6349) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6349) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6349) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6349) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6350) : item=0 name=/dev/block/259:262144 inode=24065 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6350) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6350) : arch=i386 syscall=readlink success=yes exit=7 a0=8080078 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6351) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24067 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6351) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6351) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=80806b0 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6352) : item=0 name=/dev/disk/by-id/ata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24066 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6352) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6352) : arch=i386 syscall=readlink success=yes exit=10 a0=807d6c8 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6353) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fata-VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2/b259:262144 inode=24067 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6353) : item=0 name=/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda/sda2 
>type=CWD msg=audit(04/20/10 11:58:11.665:6353) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6353) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=808059c a1=bff1da7c a2=80806b0 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6354) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24070 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6354) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6354) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=80806b0 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6355) : item=0 name=/dev/disk/by-id/scsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2 inode=24069 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6355) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6355) : arch=i386 syscall=readlink success=yes exit=10 a0=807e2f0 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6356) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fscsi-SATA_VBOX_HARDDISK_VB67d01dc4-189b2a8b-part2/b259:262144 inode=24070 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6356) : item=0 name=/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda/sda2 
>type=CWD msg=audit(04/20/10 11:58:11.665:6356) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6356) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=808059c a1=bff1da7c a2=80806b0 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6357) : item=0 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part2 inode=24073 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6357) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6357) : arch=i386 syscall=open success=yes exit=3 a0=bff1ee7c a1=98800 a2=80806b0 a3=bff1da7c items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6358) : item=0 name=/dev/disk/by-path/pci-0000:00:0d.0-scsi-0:0:0:0-part2 inode=24072 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6358) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6358) : arch=i386 syscall=readlink success=yes exit=10 a0=807e3f0 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6359) : item=1 name=/dev/.udev/links/disk\x2fby-path\x2fpci-0000:00:0d.0-scsi-0:0:0:0-part2/b259:262144 inode=24073 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6359) : item=0 name=/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda/sda2 
>type=CWD msg=audit(04/20/10 11:58:11.665:6359) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6359) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=808059c a1=bff1da7c a2=80806b0 a3=bff1da7c items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6360) : item=0 name=/dev/.udev/watch/229 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6360) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6360) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=80806b0 items=1 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6361) : item=2 name=/dev/.udev/watch/229 inode=25602 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6361) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6361) : item=0 name=/devices/pci0000:00/0000:00:0d.0/host0/target0:0:0/0:0:0:0/block/sda/sda2 
>type=CWD msg=audit(04/20/10 11:58:11.665:6361) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6361) : arch=i386 syscall=symlink success=yes exit=0 a0=808059c a1=bff1fbfc a2=8068008 a3=80806b0 items=3 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6362) : item=1 name=/dev/.udev/db/block:sda2.tmp inode=25603 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6362) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6362) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6362) : arch=i386 syscall=open success=yes exit=3 a0=bff1f714 a1=8241 a2=1b6 a3=8068810 items=2 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.665:6363) : item=4 name=/dev/.udev/db/block:sda2 inode=25603 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6363) : item=3 name=/dev/.udev/db/block:sda2 inode=25599 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6363) : item=2 name=/dev/.udev/db/block:sda2.tmp inode=25603 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6363) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.665:6363) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.665:6363) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.665:6363) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4740 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.693:6364) : item=0 name=/dev/.tmp-block-253:2 inode=25580 dev=00:0e mode=block,600 ouid=root ogid=root rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:58:11.693:6364) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.693:6364) : arch=i386 syscall=open success=yes exit=3 a0=bfe9bd3a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5027 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.701:6365) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.701:6365) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.701:6365) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.737:6366) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.737:6366) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.737:6366) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5028 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.753:6367) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.753:6367) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.753:6367) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.753:6368) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:11.753:6368) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.753:6368) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=1510 pid=5028 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.769:6369) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.769:6369) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.769:6369) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5029 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.782:6370) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:11.782:6370) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.782:6370) : arch=i386 syscall=open success=yes exit=3 a0=bfefae5c a1=8002 a2=0 a3=bfefae5c items=1 ppid=1510 pid=5029 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-dm-expor exe=/lib/udev/udisks-dm-export key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.790:6371) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.790:6371) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.790:6371) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5030 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.802:6372) : item=0 name=/dev/.udev/queue.bin inode=25221 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.802:6372) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.802:6372) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.822:6373) : item=0 name=/dev/.udev/db/block:dm-2 inode=25637 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.822:6373) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:58:11.822:6373) : arch=i386 syscall=open success=yes exit=5 a0=bfae2c7c a1=8000 a2=1b6 a3=806bd20 items=1 ppid=4072 pid=4111 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.850:6374) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.850:6374) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.850:6374) : arch=i386 syscall=open success=yes exit=3 a0=bfb0267c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5018 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.893:6375) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:11.893:6375) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.893:6375) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.921:6376) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:11.921:6376) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.921:6376) : arch=i386 syscall=open success=yes exit=3 a0=80efc43 a1=8000 a2=0 a3=80e5111 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.925:6377) : item=0 name=/dev/ram0 inode=3891 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:00 
>type=CWD msg=audit(04/20/10 11:58:11.925:6377) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.925:6377) : arch=i386 syscall=open success=yes exit=4 a0=8120690 a1=4c000 a2=0 a3=81205e8 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.925:6378) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:11.925:6378) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.925:6378) : arch=i386 syscall=open success=yes exit=4 a0=8120be8 a1=4c000 a2=0 a3=811ffc0 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.925:6379) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:11.925:6379) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.925:6379) : arch=i386 syscall=open success=yes exit=4 a0=8120910 a1=4c000 a2=0 a3=811fd98 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.925:6380) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:11.925:6380) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.925:6380) : arch=i386 syscall=open success=yes exit=5 a0=8120570 a1=4c000 a2=0 a3=811fcd8 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.925:6381) : item=0 name=/dev/root inode=2791 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=07:00 
>type=CWD msg=audit(04/20/10 11:58:11.925:6381) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.925:6381) : arch=i386 syscall=open success=yes exit=5 a0=8120728 a1=4c000 a2=0 a3=811fc40 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6382) : item=0 name=/dev/ram1 inode=3881 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:11.929:6382) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6382) : arch=i386 syscall=open success=yes exit=5 a0=8120590 a1=4c000 a2=0 a3=8120480 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6383) : item=0 name=/dev/ram2 inode=3874 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:02 
>type=CWD msg=audit(04/20/10 11:58:11.929:6383) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6383) : arch=i386 syscall=open success=yes exit=5 a0=8120930 a1=4c000 a2=0 a3=8120738 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6384) : item=0 name=/dev/ram3 inode=3946 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:11.929:6384) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6384) : arch=i386 syscall=open success=yes exit=5 a0=8120c08 a1=4c000 a2=0 a3=8120a10 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6385) : item=0 name=/dev/ram4 inode=3921 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:04 
>type=CWD msg=audit(04/20/10 11:58:11.929:6385) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6385) : arch=i386 syscall=open success=yes exit=5 a0=8120c28 a1=4c000 a2=0 a3=8120aa8 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6386) : item=0 name=/dev/ram5 inode=3896 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:05 
>type=CWD msg=audit(04/20/10 11:58:11.929:6386) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6386) : arch=i386 syscall=open success=yes exit=5 a0=81203a8 a1=4c000 a2=0 a3=81202a8 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6387) : item=0 name=/dev/ram6 inode=3886 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:06 
>type=CWD msg=audit(04/20/10 11:58:11.929:6387) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6387) : arch=i386 syscall=open success=yes exit=5 a0=8120198 a1=4c000 a2=0 a3=81200a8 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6388) : item=0 name=/dev/ram7 inode=3916 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:07 
>type=CWD msg=audit(04/20/10 11:58:11.929:6388) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6388) : arch=i386 syscall=open success=yes exit=5 a0=8120c48 a1=4c000 a2=0 a3=8120b40 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6389) : item=0 name=/dev/ram8 inode=3951 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:08 
>type=CWD msg=audit(04/20/10 11:58:11.929:6389) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6389) : arch=i386 syscall=open success=yes exit=5 a0=8120950 a1=4c000 a2=0 a3=81207d0 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6390) : item=0 name=/dev/ram9 inode=3937 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:11.929:6390) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6390) : arch=i386 syscall=open success=yes exit=5 a0=8120970 a1=4c000 a2=0 a3=8120868 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6391) : item=0 name=/dev/ram10 inode=3931 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0a 
>type=CWD msg=audit(04/20/10 11:58:11.929:6391) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6391) : arch=i386 syscall=open success=yes exit=5 a0=811ff88 a1=4c000 a2=0 a3=811ff00 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6392) : item=0 name=/dev/ram11 inode=3906 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0b 
>type=CWD msg=audit(04/20/10 11:58:11.929:6392) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6392) : arch=i386 syscall=open success=yes exit=5 a0=811fc30 a1=4c000 a2=0 a3=811fba8 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6393) : item=0 name=/dev/ram12 inode=3901 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0c 
>type=CWD msg=audit(04/20/10 11:58:11.929:6393) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6393) : arch=i386 syscall=open success=yes exit=5 a0=8120098 a1=4c000 a2=0 a3=811fe60 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6394) : item=0 name=/dev/ram13 inode=3938 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0d 
>type=CWD msg=audit(04/20/10 11:58:11.929:6394) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6394) : arch=i386 syscall=open success=yes exit=5 a0=8120278 a1=4c000 a2=0 a3=811fa68 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6395) : item=0 name=/dev/ram14 inode=3911 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0e 
>type=CWD msg=audit(04/20/10 11:58:11.929:6395) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6395) : arch=i386 syscall=open success=yes exit=5 a0=8120298 a1=4c000 a2=0 a3=811fb08 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.929:6396) : item=0 name=/dev/ram15 inode=3926 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=01:0f 
>type=CWD msg=audit(04/20/10 11:58:11.929:6396) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.929:6396) : arch=i386 syscall=open success=yes exit=5 a0=8120a00 a1=4c000 a2=0 a3=81203b8 items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.933:6397) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:11.933:6397) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.933:6397) : arch=i386 syscall=open success=yes exit=5 a0=bfd2c72c a1=8002 a2=0 a3=bfd2c72c items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.937:6398) : item=0 name=/dev/mapper/system-home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:11.937:6398) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.937:6398) : arch=i386 syscall=open success=yes exit=6 a0=bfd2c95c a1=8000 a2=0 a3=bfd2c95c items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.937:6399) : item=0 name=/dev/mapper/system-root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:11.937:6399) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.937:6399) : arch=i386 syscall=open success=yes exit=6 a0=bfd2c95c a1=8000 a2=0 a3=bfd2c95c items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.937:6400) : item=0 name=/dev/mapper/system-swap inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:58:11.937:6400) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.937:6400) : arch=i386 syscall=open success=yes exit=6 a0=bfd2c95c a1=8000 a2=0 a3=bfd2c95c items=1 ppid=4147 pid=5031 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=vgdisplay exe=/sbin/lvm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.993:6401) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:11.993:6401) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:11.993:6401) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5032 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:11.078:6234) : item=4 name=/dev/.udev/db/block:ram4 inode=25517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.078:6234) : item=3 name=/dev/.udev/db/block:ram4 inode=25339 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.078:6234) : item=2 name=/dev/.udev/db/block:ram4.tmp inode=25517 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.078:6234) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:11.078:6234) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:11.078:6234) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:11.078:6234) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4744 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.041:6403) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.041:6403) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.041:6403) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5033 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.049:6404) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:12.049:6404) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.049:6404) : arch=i386 syscall=open success=yes exit=3 a0=bf9596dc a1=8002 a2=0 a3=bf9596dc items=1 ppid=4147 pid=5033 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.078:6405) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.078:6405) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.078:6405) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5034 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.090:6406) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:12.090:6406) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.090:6406) : arch=i386 syscall=open success=yes exit=3 a0=bff0388c a1=8002 a2=0 a3=bff0388c items=1 ppid=4147 pid=5034 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.125:6407) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.125:6407) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.125:6407) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5035 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.133:6408) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:12.133:6408) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.133:6408) : arch=i386 syscall=open success=yes exit=3 a0=bff8347c a1=8002 a2=0 a3=bff8347c items=1 ppid=4147 pid=5035 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.157:6409) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.157:6409) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.157:6409) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5036 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.165:6410) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:12.165:6410) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.165:6410) : arch=i386 syscall=open success=yes exit=3 a0=bf9f058c a1=8002 a2=0 a3=bf9f058c items=1 ppid=4147 pid=5036 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.197:6411) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.197:6411) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.197:6411) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5037 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.205:6412) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:12.205:6412) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.205:6412) : arch=i386 syscall=open success=yes exit=3 a0=bfd4938c a1=8002 a2=0 a3=bfd4938c items=1 ppid=4147 pid=5037 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.205:6413) : item=0 name=/dev/mapper/system-home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:12.205:6413) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.205:6413) : arch=i386 syscall=open success=yes exit=4 a0=bfd4948c a1=8000 a2=0 a3=bfd4948c items=1 ppid=4147 pid=5037 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.205:6414) : item=0 name=/dev/mapper/system-swap inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:58:12.205:6414) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.205:6414) : arch=i386 syscall=open success=yes exit=4 a0=bfd4948c a1=8000 a2=0 a3=bfd4948c items=1 ppid=4147 pid=5037 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.205:6415) : item=0 name=/dev/mapper/system-root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:58:12.205:6415) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.205:6415) : arch=i386 syscall=open success=yes exit=4 a0=bfd4948c a1=8000 a2=0 a3=bfd4948c items=1 ppid=4147 pid=5037 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.438:6416) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.438:6416) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.438:6416) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5038 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.449:6417) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:12.449:6417) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.449:6417) : arch=i386 syscall=open success=yes exit=3 a0=bfe00fdc a1=8002 a2=0 a3=bfe00fdc items=1 ppid=4147 pid=5038 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.493:6418) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:12.493:6418) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.493:6418) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5039 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.501:6419) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:12.501:6419) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.501:6419) : arch=i386 syscall=open success=yes exit=3 a0=bfcdac2d a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5039 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.525:6420) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.525:6420) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.525:6420) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5040 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.537:6421) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:12.537:6421) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.537:6421) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5041 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.541:6422) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.541:6422) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.541:6422) : arch=i386 syscall=open success=yes exit=3 a0=bff67aec a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5040 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.557:6423) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.557:6423) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.557:6423) : arch=i386 syscall=open success=yes exit=3 a0=bfcdd72c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=5041 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.557:6424) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:12.557:6424) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.557:6424) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=5041 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.590:6425) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.590:6425) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.590:6425) : arch=i386 syscall=open success=yes exit=3 a0=bff67aec a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5040 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.637:6426) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.637:6426) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.637:6426) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5042 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.645:6427) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.645:6427) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.645:6427) : arch=i386 syscall=open success=yes exit=3 a0=bf8ab0dc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5042 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.673:6428) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:12.673:6428) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.673:6428) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5043 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.685:6429) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:12.685:6429) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.685:6429) : arch=i386 syscall=open success=yes exit=3 a0=bf91ac2d a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5043 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.721:6430) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:12.721:6430) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.721:6430) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5045 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.737:6431) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.737:6431) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.737:6431) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5044 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.749:6432) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.749:6432) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.749:6432) : arch=i386 syscall=open success=yes exit=3 a0=bfe2871c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=5045 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.749:6433) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.749:6433) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.749:6433) : arch=i386 syscall=open success=yes exit=3 a0=bfdfe99c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5044 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.753:6434) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:12.753:6434) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.753:6434) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=5045 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.801:6435) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.801:6435) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.801:6435) : arch=i386 syscall=open success=yes exit=3 a0=bfdfe99c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5044 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.817:6436) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:12.817:6436) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.817:6436) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5046 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.829:6437) : item=0 name=/dev/sda2 inode=23863 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:40000 
>type=CWD msg=audit(04/20/10 11:58:12.829:6437) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.829:6437) : arch=i386 syscall=open success=yes exit=3 a0=bff27c2d a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5046 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.845:6438) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:12.845:6438) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.845:6438) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5048 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.861:6439) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:12.861:6439) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.861:6439) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5049 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.885:6440) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.885:6440) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.885:6440) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5047 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.893:6441) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.893:6441) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.893:6441) : arch=i386 syscall=open success=yes exit=3 a0=bf8a191c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=5049 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.893:6442) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.893:6442) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.893:6442) : arch=i386 syscall=open success=yes exit=3 a0=bf8651ac a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5047 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.897:6443) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:12.897:6443) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:12.897:6443) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=4700000 items=1 ppid=1510 pid=5049 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.947:6444) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.947:6444) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.947:6444) : arch=i386 syscall=open success=yes exit=3 a0=bf8651ac a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5047 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.981:6445) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:12.981:6445) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.981:6445) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5050 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.989:6446) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:12.989:6446) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.989:6446) : arch=i386 syscall=open success=yes exit=3 a0=bfc8b65c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5050 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:12.005:6402) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:12.005:6402) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:12.005:6402) : arch=i386 syscall=open success=yes exit=3 a0=bf8a400c a1=8002 a2=0 a3=bf8a400c items=1 ppid=4147 pid=5032 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.049:6448) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:13.049:6448) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.049:6448) : arch=i386 syscall=open success=yes exit=3 a0=bfb8547c a1=8002 a2=0 a3=bfb8547c items=1 ppid=5051 pid=5052 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.181:6449) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:13.181:6449) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.181:6449) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5056 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.230:6450) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.230:6450) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.230:6450) : arch=i386 syscall=open success=yes exit=3 a0=bfecb51a a1=8082 a2=0 a3=809f008 items=1 ppid=4147 pid=5056 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.234:6451) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:13.234:6451) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.234:6451) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4147 pid=5056 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.267:6452) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:13.267:6452) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.267:6452) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5057 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.278:6453) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.278:6453) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.278:6453) : arch=i386 syscall=open success=yes exit=3 a0=bfb95c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5057 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.306:6454) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:13.306:6454) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.306:6454) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.306:6455) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:13.306:6455) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.306:6455) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5059 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.346:6456) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:13.346:6456) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.346:6456) : arch=i386 syscall=open success=yes exit=3 a0=bfc47e3c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=5059 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.350:6457) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:13.350:6457) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.350:6457) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=5059 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.506:6458) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.506:6458) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.506:6458) : arch=i386 syscall=open success=yes exit=3 a0=bfb00518 a1=80 a2=bfafe478 a3=bfb00518 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.506:6459) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.506:6459) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.506:6459) : arch=i386 syscall=open success=yes exit=3 a0=bfb00518 a1=8000 a2=0 a3=bfafe638 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.506:6460) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.506:6460) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.506:6460) : arch=i386 syscall=open success=yes exit=3 a0=bfb00518 a1=8000 a2=0 a3=8057168 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.506:6461) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.506:6461) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.506:6461) : arch=i386 syscall=open success=yes exit=3 a0=bfb00518 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.506:6462) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.506:6462) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.506:6462) : arch=i386 syscall=open success=yes exit=3 a0=80571f0 a1=8082 a2=0 a3=8057cd8 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.506:6463) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.506:6463) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.506:6463) : arch=i386 syscall=open success=yes exit=4 a0=8057170 a1=8002 a2=0 a3=11800 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.510:6464) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:13.510:6464) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.510:6464) : arch=i386 syscall=open success=yes exit=4 a0=b77dece4 a1=8000 a2=0 a3=bfafe7a8 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.530:6465) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:13.530:6465) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.530:6465) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5060 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.585:6466) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.585:6466) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.585:6466) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=8057170 a1=80 a2=bfafe208 a3=8057170 items=1 ppid=4147 pid=5058 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.589:6467) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:13.589:6467) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.589:6467) : arch=i386 syscall=open success=yes exit=3 a0=bfcf6c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5060 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.741:6468) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:13.741:6468) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.741:6468) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5061 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.877:6469) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:13.877:6469) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.877:6469) : arch=i386 syscall=open success=yes exit=3 a0=bfd605dc a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=5061 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.881:6470) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:13.881:6470) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:13.881:6470) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=5061 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:13.029:6447) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:13.029:6447) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:13.029:6447) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5051 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.589:6472) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:14.589:6472) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:14.589:6472) : arch=i386 syscall=open success=yes exit=3 a0=bfcb2c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5062 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.609:6473) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:14.609:6473) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:14.609:6473) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5063 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.633:6474) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:14.633:6474) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:14.633:6474) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5065 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.657:6475) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:14.657:6475) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:14.657:6475) : arch=i386 syscall=open success=yes exit=3 a0=bf85505c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=5065 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.661:6476) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:14.661:6476) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:14.661:6476) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=5065 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.705:6477) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:14.705:6477) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:14.705:6477) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5064 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.962:6478) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:14.962:6478) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:14.962:6478) : arch=i386 syscall=open success=yes exit=3 a0=80521a8 a1=8002 a2=0 a3=8052140 items=1 ppid=4147 pid=5064 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=tune2fs exe=/sbin/tune2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.573:6471) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:14.573:6471) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:14.573:6471) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5062 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.962:6479) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:14.962:6479) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:14.962:6479) : arch=i386 syscall=open success=yes exit=4 a0=8052088 a1=80 a2=bfe1c798 a3=8052088 items=1 ppid=4147 pid=5064 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=tune2fs exe=/sbin/tune2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.981:6480) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:14.981:6480) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:14.981:6480) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5066 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:14.997:6481) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:14.997:6481) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:14.997:6481) : arch=i386 syscall=open success=yes exit=3 a0=bfad7c2a a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5066 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.029:6482) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:15.029:6482) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.029:6482) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5068 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.029:6483) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:15.029:6483) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.029:6483) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5067 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.045:6484) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.045:6484) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.045:6484) : arch=i386 syscall=open success=yes exit=3 a0=bfab699c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5067 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.113:6485) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.113:6485) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.113:6485) : arch=i386 syscall=open success=yes exit=3 a0=bfab699c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5067 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.161:6486) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.161:6486) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.161:6486) : arch=i386 syscall=open success=yes exit=3 a0=bfab699c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5067 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.189:6487) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:15.189:6487) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.189:6487) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5069 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.209:6488) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.209:6488) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.209:6488) : arch=i386 syscall=open success=yes exit=3 a0=bfbf1d8c a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=5069 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.213:6489) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.213:6489) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.213:6489) : arch=i386 syscall=open success=yes exit=3 a0=bfab699c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5067 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.213:6490) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:15.213:6490) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.213:6490) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=5069 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.249:6491) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:15.249:6491) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.249:6491) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5070 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.257:6492) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:15.257:6492) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.257:6492) : arch=i386 syscall=open success=yes exit=3 a0=bfb83c2d a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5070 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.261:6493) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.261:6493) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.261:6493) : arch=i386 syscall=open success=yes exit=3 a0=bfab699c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5067 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.277:6494) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:15.277:6494) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.277:6494) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5071 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.293:6495) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:15.293:6495) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.293:6495) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5072 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.313:6496) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.313:6496) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.313:6496) : arch=i386 syscall=open success=yes exit=3 a0=bfab699c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5067 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.313:6497) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.313:6497) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.313:6497) : arch=i386 syscall=open success=yes exit=3 a0=bfa515dc a1=8000 a2=1b6 a3=8053ed8 items=1 ppid=1510 pid=5072 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.321:6498) : item=0 name=/dev/sda inode=4018 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:00 
>type=CWD msg=audit(04/20/10 11:58:15.321:6498) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:15.321:6498) : arch=i386 syscall=open success=yes exit=3 a0=8053ed8 a1=0 a2=8053138 a3=100000 items=1 ppid=1510 pid=5072 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-part-id exe=/lib/udev/udisks-part-id key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.362:6499) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:15.362:6499) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.362:6499) : arch=i386 syscall=open success=yes exit=3 a0=bfab699c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5067 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.394:6500) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:15.394:6500) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.394:6500) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5073 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.402:6501) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:15.402:6501) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.402:6501) : arch=i386 syscall=open success=yes exit=3 a0=804f030 a1=8000 a2=0 a3=804f008 items=1 ppid=4147 pid=5073 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.402:6502) : item=0 name=/dev/sda1 inode=22586 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=103:80000 
>type=CWD msg=audit(04/20/10 11:58:15.402:6502) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.402:6502) : arch=i386 syscall=open success=yes exit=3 a0=804f080 a1=8000 a2=0 a3=804f040 items=1 ppid=4147 pid=5073 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:15.410:6503) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:15.410:6503) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:15.410:6503) : arch=i386 syscall=open success=yes exit=3 a0=804f030 a1=8241 a2=1b6 a3=804f720 items=1 ppid=4147 pid=5073 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.359:6505) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:16.359:6505) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.359:6505) : arch=i386 syscall=open success=yes exit=3 a0=bfa4e513 a1=8082 a2=0 a3=809f008 items=1 ppid=4147 pid=5074 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.470:6506) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:58:16.470:6506) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.470:6506) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4147 pid=5074 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.493:6507) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:16.493:6507) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:16.493:6507) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5075 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.517:6508) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:16.517:6508) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.517:6508) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.637:6509) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:16.637:6509) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.637:6509) : arch=i386 syscall=open success=yes exit=3 a0=bfef6511 a1=80 a2=bfef5538 a3=bfef6511 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.637:6510) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:16.637:6510) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.637:6510) : arch=i386 syscall=open success=yes exit=3 a0=bfef6511 a1=8000 a2=0 a3=bfef56f8 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.637:6511) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:16.637:6511) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.637:6511) : arch=i386 syscall=open success=yes exit=3 a0=bfef6511 a1=8000 a2=0 a3=8057168 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.637:6512) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:16.637:6512) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.637:6512) : arch=i386 syscall=open success=yes exit=3 a0=bfef6511 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.637:6513) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:16.637:6513) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.637:6513) : arch=i386 syscall=open success=yes exit=3 a0=8057d40 a1=8082 a2=0 a3=8057cd8 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.637:6514) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:16.637:6514) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.637:6514) : arch=i386 syscall=open success=yes exit=4 a0=8057170 a1=8002 a2=0 a3=18c800 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.637:6515) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:58:16.637:6515) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.637:6515) : arch=i386 syscall=open success=yes exit=4 a0=b77adce4 a1=8000 a2=0 a3=bfef5868 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:16.350:6504) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:16.350:6504) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:16.350:6504) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5074 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:19.050:6522) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:19.050:6522) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:19.050:6522) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5080 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:17.474:6517) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:17.474:6517) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:17.474:6517) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5077 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:19.058:6523) : item=0 name=/dev/dm-0 inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:19.058:6523) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:19.058:6523) : arch=i386 syscall=open success=yes exit=3 a0=bfbe6d46 a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5080 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:19.066:6524) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:19.066:6524) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:19.066:6524) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5081 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:19.162:6525) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:19.162:6525) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:19.162:6525) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=1510 pid=5081 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:17.490:6518) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:17.490:6518) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:17.490:6518) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5078 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:17.938:6519) : item=0 name=/dev/dm-0 inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:17.938:6519) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:17.938:6519) : arch=i386 syscall=open success=yes exit=3 a0=bfde0d57 a1=8000 a2=0 a3=804f008 items=1 ppid=1510 pid=5078 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:18.970:6520) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:18.970:6520) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:18.970:6520) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5079 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:17.462:6516) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:17.462:6516) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:17.462:6516) : arch=i386 syscall=open success=yes exit=3 a0=bfccbd6c a1=8002 a2=0 a3=bfccbd6c items=1 ppid=1510 pid=5075 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:19.042:6521) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:19.042:6521) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:19.042:6521) : arch=i386 syscall=open success=yes exit=3 a0=bf88851c a1=8002 a2=0 a3=bf88851c items=1 ppid=1510 pid=5079 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:22.593:6527) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:22.593:6527) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:22.593:6527) : arch=i386 syscall=open success=yes exit=3 a0=bf9ac2bc a1=8002 a2=0 a3=bf9ac2bc items=1 ppid=1510 pid=5082 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-dm-expor exe=/lib/udev/udisks-dm-export key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:22.597:6528) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:22.597:6528) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:22.597:6528) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5083 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:22.690:6529) : item=0 name=/dev/.udev/db/block:dm-0 inode=25812 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:22.690:6529) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:58:22.690:6529) : arch=i386 syscall=open success=yes exit=5 a0=bfae2c7c a1=8000 a2=1b6 a3=806c420 items=1 ppid=4072 pid=4111 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:22.258:6526) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:22.258:6526) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:22.258:6526) : arch=i386 syscall=open success=yes exit=3 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=1510 pid=5082 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:31.913:6532) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:31.913:6532) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:31.913:6532) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=8057170 a1=80 a2=bfef52c8 a3=8057170 items=1 ppid=4147 pid=5076 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:56.066:6534) : item=0 name=/dev/.udev/db/block:dm-0 inode=25812 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:56.066:6534) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:56.066:6534) : arch=i386 syscall=open success=yes exit=5 a0=bff1d55c a1=8000 a2=1b6 a3=8084238 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:56.066:6533) : item=0 name=/dev/.udev/db/block:dm-0 inode=25812 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:56.066:6533) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:56.066:6533) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=8083f58 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:56.070:6535) : item=0 name=/dev/.udev/watch/240 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:56.070:6535) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:56.070:6535) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1f71c a1=0 a2=807fcd0 a3=bff1f71c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:56.079:6536) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:56.079:6536) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:56.079:6536) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5085 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:56.658:6537) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:56.658:6537) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:56.658:6537) : arch=i386 syscall=open success=yes exit=3 a0=bfdb1e8c a1=8002 a2=0 a3=bfdb1e8c items=1 ppid=4812 pid=5085 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:56.658:6538) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:56.658:6538) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:56.658:6538) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5087 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:56.674:6539) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:56.674:6539) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:56.674:6539) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5088 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.041:6540) : item=0 name=/dev/dm-0 inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:57.041:6540) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.041:6540) : arch=i386 syscall=open success=yes exit=3 a0=bfaedd57 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5088 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.053:6541) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.053:6541) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.053:6541) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5089 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.061:6542) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:57.061:6542) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.061:6542) : arch=i386 syscall=open success=yes exit=3 a0=bfe3c4bc a1=8002 a2=0 a3=bfe3c4bc items=1 ppid=4812 pid=5089 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.065:6543) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.065:6543) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.065:6543) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5090 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.073:6544) : item=0 name=/dev/dm-0 inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:57.073:6544) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.073:6544) : arch=i386 syscall=open success=yes exit=3 a0=bfc2bc72 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5090 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.085:6545) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.085:6545) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.085:6545) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5091 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.489:6546) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:57.489:6546) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.489:6546) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4812 pid=5091 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.489:6547) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:57.489:6547) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.489:6547) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5086 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.497:6548) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.497:6548) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.497:6548) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5092 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.577:6549) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.577:6549) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.577:6549) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5093 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.585:6550) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:57.585:6550) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.585:6550) : arch=i386 syscall=open success=yes exit=3 a0=8052188 a1=8002 a2=0 a3=8052120 items=1 ppid=4147 pid=5086 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=tune2fs exe=/sbin/tune2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.585:6551) : item=0 name=/dev/system/home inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:57.585:6551) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.585:6551) : arch=i386 syscall=open success=yes exit=4 a0=8052070 a1=80 a2=bfd614b8 a3=8052070 items=1 ppid=4147 pid=5086 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=tune2fs exe=/sbin/tune2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.638:6552) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:57.638:6552) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.638:6552) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5094 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.717:6553) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:57.717:6553) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.717:6553) : arch=i386 syscall=open success=yes exit=3 a0=bfbb6aec a1=8002 a2=0 a3=bfbb6aec items=1 ppid=4812 pid=5093 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-dm-expor exe=/lib/udev/udisks-dm-export key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.721:6554) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.721:6554) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.721:6554) : arch=i386 syscall=open success=yes exit=3 a0=bfce0cfc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5094 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.725:6555) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.725:6555) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.725:6555) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5095 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.777:6556) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.777:6556) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.777:6556) : arch=i386 syscall=open success=yes exit=3 a0=bfce0cfc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5094 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6557) : item=1 name=/dev/.udev/db/block:dm-0.tmp inode=25847 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6557) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6557) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6557) : arch=i386 syscall=open success=yes exit=4 a0=bff1f224 a1=8241 a2=1b6 a3=8086390 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6558) : item=4 name=/dev/.udev/db/block:dm-0 inode=25847 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6558) : item=3 name=/dev/.udev/db/block:dm-0 inode=25812 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6558) : item=2 name=/dev/.udev/db/block:dm-0.tmp inode=25847 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6558) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6558) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6558) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6558) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6559) : item=0 name=/dev/.udev/links/mapper\x2fsystem-home inode=25159 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6559) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6559) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8080ad8 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6560) : item=0 name=/dev/mapper/system-home inode=25158 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6560) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6560) : arch=i386 syscall=readlink success=yes exit=7 a0=8085b10 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6561) : item=1 name=/dev/.udev/links/mapper\x2fsystem-home/b253:0 inode=25159 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6561) : item=0 name=/devices/virtual/block/dm-0 
>type=CWD msg=audit(04/20/10 11:58:57.806:6561) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6561) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8084124 a1=bff1da7c a2=8080ad8 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6562) : item=0 name=/dev/.udev/links/system\x2fhome inode=25162 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6562) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6562) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8080ad8 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6563) : item=0 name=/dev/system/home inode=25161 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6563) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6563) : arch=i386 syscall=readlink success=yes exit=7 a0=8085c60 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6564) : item=1 name=/dev/.udev/links/system\x2fhome/b253:0 inode=25162 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6564) : item=0 name=/devices/virtual/block/dm-0 
>type=CWD msg=audit(04/20/10 11:58:57.806:6564) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6564) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8084124 a1=bff1da7c a2=8080ad8 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6565) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fdm-name-system-home inode=25165 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6565) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6565) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8080ad8 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6566) : item=0 name=/dev/disk/by-id/dm-name-system-home inode=25164 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6566) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6566) : arch=i386 syscall=readlink success=yes exit=10 a0=8085ca8 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6567) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fdm-name-system-home/b253:0 inode=25165 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6567) : item=0 name=/devices/virtual/block/dm-0 
>type=CWD msg=audit(04/20/10 11:58:57.806:6567) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6567) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8084124 a1=bff1da7c a2=8080ad8 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6568) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fdm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUu0Fu25w4cfwxpJBTbPTr3ykJ2qxAGpZt inode=25168 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6568) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6568) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8080ad8 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6569) : item=0 name=/dev/disk/by-id/dm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUu0Fu25w4cfwxpJBTbPTr3ykJ2qxAGpZt inode=25167 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6569) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6569) : arch=i386 syscall=readlink success=yes exit=10 a0=8085d48 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6570) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fdm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUu0Fu25w4cfwxpJBTbPTr3ykJ2qxAGpZt/b253:0 inode=25168 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6570) : item=0 name=/devices/virtual/block/dm-0 
>type=CWD msg=audit(04/20/10 11:58:57.806:6570) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6570) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8084124 a1=bff1da7c a2=8080ad8 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6571) : item=2 name=/dev/disk/by-uuid/71c8eb30-b4ff-4c45-8c89-3b01078b052e inode=25848 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6571) : item=1 name=/dev/disk/by-uuid/ inode=4680 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6571) : item=0 name=../../dm-0 
>type=CWD msg=audit(04/20/10 11:58:57.806:6571) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6571) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1d5fc a1=8085f90 a2=8068008 a3=bff1ea7c items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6572) : item=1 name=/dev/.udev/links/disk\x2fby-uuid\x2f71c8eb30-b4ff-4c45-8c89-3b01078b052e inode=25849 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6572) : item=0 name=/dev/.udev/links/ inode=5781 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6572) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6572) : arch=i386 syscall=mkdir success=yes exit=0 a0=bff1d5fc a1=1ed a2=8066ff4 a3=bff1d5fc items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6573) : item=2 name=/dev/.udev/links/disk\x2fby-uuid\x2f71c8eb30-b4ff-4c45-8c89-3b01078b052e/b253:0 inode=25850 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6573) : item=1 name=/dev/.udev/links/disk\x2fby-uuid\x2f71c8eb30-b4ff-4c45-8c89-3b01078b052e/ inode=25849 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6573) : item=0 name=/devices/virtual/block/dm-0 
>type=CWD msg=audit(04/20/10 11:58:57.806:6573) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6573) : arch=i386 syscall=symlink success=yes exit=0 a0=8084124 a1=bff1da7c a2=8080ad8 a3=bff1da7c items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6574) : item=0 name=/dev/block/253:0 inode=25170 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6574) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6574) : arch=i386 syscall=readlink success=yes exit=7 a0=80860d8 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6575) : item=0 name=/dev/.udev/watch/241 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6575) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6575) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8080ad8 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6576) : item=2 name=/dev/.udev/watch/241 inode=25853 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6576) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6576) : item=0 name=/devices/virtual/block/dm-0 
>type=CWD msg=audit(04/20/10 11:58:57.806:6576) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6576) : arch=i386 syscall=symlink success=yes exit=0 a0=8084124 a1=bff1fbfc a2=8068008 a3=8080ad8 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6577) : item=1 name=/dev/.udev/db/block:dm-0.tmp inode=25854 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6577) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6577) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6577) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=8087398 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.806:6578) : item=4 name=/dev/.udev/db/block:dm-0 inode=25854 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6578) : item=3 name=/dev/.udev/db/block:dm-0 inode=25847 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6578) : item=2 name=/dev/.udev/db/block:dm-0.tmp inode=25854 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6578) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.806:6578) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.806:6578) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.806:6578) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.810:6579) : item=0 name=/dev/.udev/db/block:dm-0 inode=25854 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.810:6579) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:58:57.810:6579) : arch=i386 syscall=open success=yes exit=5 a0=bfae2c7c a1=8000 a2=1b6 a3=806b6d8 items=1 ppid=4072 pid=4111 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.814:6580) : item=0 name=/dev/.udev/db/block:dm-0 inode=25854 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.814:6580) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.814:6580) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=80778c0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.814:6581) : item=0 name=/dev/.udev/db/block:dm-0 inode=25854 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.814:6581) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.814:6581) : arch=i386 syscall=open success=yes exit=5 a0=bff1d55c a1=8000 a2=1b6 a3=8086390 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.814:6582) : item=0 name=/dev/.udev/watch/241 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.814:6582) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.814:6582) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1f71c a1=0 a2=8080ad8 a3=bff1f71c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.818:6583) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.818:6583) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.818:6583) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5096 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.826:6584) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:58:57.826:6584) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.826:6584) : arch=i386 syscall=open success=yes exit=3 a0=bfbe8b9c a1=8002 a2=0 a3=bfbe8b9c items=1 ppid=4812 pid=5096 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.826:6585) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.826:6585) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.826:6585) : arch=i386 syscall=open success=yes exit=3 a0=bfce0cfc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5094 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.830:6586) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.830:6586) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.830:6586) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5097 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.834:6587) : item=0 name=/dev/dm-0 inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=CWD msg=audit(04/20/10 11:58:57.834:6587) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.834:6587) : arch=i386 syscall=open success=yes exit=3 a0=bfab8dc4 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5097 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.838:6588) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.838:6588) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.838:6588) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5098 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.846:6589) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:57.846:6589) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.846:6589) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4812 pid=5098 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.858:6590) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.858:6590) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.858:6590) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5099 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.862:6591) : item=1 name=/dev/dm-0 inode=25157 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:00 
>type=PATH msg=audit(04/20/10 11:58:57.862:6591) : item=0 name=/dev/ inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.862:6591) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.862:6591) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1fbdc a1=bff1fb74 a2=8077b28 a3=8080ad8 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.862:6592) : item=1 name=/dev/.udev/db/block:dm-0.tmp inode=25865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.862:6592) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.862:6592) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.862:6592) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=80845d8 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.862:6593) : item=4 name=/dev/.udev/db/block:dm-0 inode=25865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.862:6593) : item=3 name=/dev/.udev/db/block:dm-0 inode=25854 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.862:6593) : item=2 name=/dev/.udev/db/block:dm-0.tmp inode=25865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.862:6593) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:58:57.862:6593) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.862:6593) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:58:57.862:6593) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.878:6594) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:58:57.878:6594) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.878:6594) : arch=i386 syscall=open success=yes exit=3 a0=bfce0cfc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5094 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.906:6595) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:58:57.906:6595) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.906:6595) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5100 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:58:57.914:6596) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:58:57.914:6596) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:58:57.914:6596) : arch=i386 syscall=open success=yes exit=3 a0=804f030 a1=8000 a2=0 a3=804f008 items=1 ppid=4147 pid=5100 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.062:6599) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.062:6599) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.062:6599) : arch=i386 syscall=open success=yes exit=3 a0=bfb1d513 a1=8082 a2=0 a3=809f008 items=1 ppid=4147 pid=5103 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.065:6600) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:59:01.065:6600) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.065:6600) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4147 pid=5103 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.069:6601) : item=0 name=/dev/.udev/db/block:dm-1 inode=25432 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.069:6601) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.069:6601) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=80843a0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.069:6602) : item=0 name=/dev/.udev/db/block:dm-1 inode=25432 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.069:6602) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.069:6602) : arch=i386 syscall=open success=yes exit=5 a0=bff1d55c a1=8000 a2=1b6 a3=8086370 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.069:6603) : item=1 name=/dev/.udev/watch/210 inode=25431 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.069:6603) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.069:6603) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.069:6603) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8083d80 a3=bff1f71c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.077:6604) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:01.077:6604) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.077:6604) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5104 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.085:6605) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:01.085:6605) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.085:6605) : arch=i386 syscall=open success=yes exit=3 a0=bfaa290c a1=8002 a2=0 a3=bfaa290c items=1 ppid=4812 pid=5104 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.093:6606) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:01.093:6606) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.093:6606) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5105 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.109:6607) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:01.109:6607) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.109:6607) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5107 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.113:6608) : item=0 name=/dev/dm-1 inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.113:6608) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.113:6608) : arch=i386 syscall=open success=yes exit=3 a0=bfb4cd57 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5107 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.129:6609) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:01.129:6609) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.129:6609) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5108 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.133:6610) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:01.133:6610) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.133:6610) : arch=i386 syscall=open success=yes exit=3 a0=bfe64b0c a1=8002 a2=0 a3=bfe64b0c items=1 ppid=4812 pid=5108 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.137:6611) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:01.137:6611) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.137:6611) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.137:6612) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:01.137:6612) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.137:6612) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5109 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.145:6613) : item=0 name=/dev/dm-1 inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.145:6613) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.145:6613) : arch=i386 syscall=open success=yes exit=3 a0=bfcafd46 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5109 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.161:6614) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:01.161:6614) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.161:6614) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5110 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.165:6615) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:01.165:6615) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.165:6615) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4812 pid=5110 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.341:6616) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:01.341:6616) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.341:6616) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5111 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.349:6617) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.349:6617) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.349:6617) : arch=i386 syscall=open success=yes exit=3 a0=bff41511 a1=80 a2=bff40608 a3=bff41511 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.349:6618) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.349:6618) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.349:6618) : arch=i386 syscall=open success=yes exit=3 a0=bff41511 a1=8000 a2=0 a3=bff407c8 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.349:6619) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.349:6619) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.349:6619) : arch=i386 syscall=open success=yes exit=3 a0=bff41511 a1=8000 a2=0 a3=8057168 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.349:6620) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.349:6620) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.349:6620) : arch=i386 syscall=open success=yes exit=3 a0=bff41511 a1=8000 a2=0 a3=0 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.349:6621) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.349:6621) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.349:6621) : arch=i386 syscall=open success=yes exit=3 a0=8057d40 a1=8082 a2=0 a3=8057cd8 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.349:6622) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:01.349:6622) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.349:6622) : arch=i386 syscall=open success=yes exit=3 a0=bfb1ac7c a1=8002 a2=0 a3=bfb1ac7c items=1 ppid=4812 pid=5111 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-dm-expor exe=/lib/udev/udisks-dm-export key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.353:6623) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:01.353:6623) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.353:6623) : arch=i386 syscall=open success=yes exit=4 a0=8057170 a1=8002 a2=0 a3=140000 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.353:6624) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:59:01.353:6624) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:01.353:6624) : arch=i386 syscall=open success=yes exit=4 a0=b7724ce4 a1=8000 a2=0 a3=bff40938 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.357:6625) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:01.357:6625) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.357:6625) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5112 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6626) : item=1 name=/dev/.udev/db/block:dm-1.tmp inode=25900 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.365:6626) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6626) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6626) : arch=i386 syscall=open success=yes exit=4 a0=bff1f224 a1=8241 a2=1b6 a3=8084868 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6627) : item=4 name=/dev/.udev/db/block:dm-1 inode=25900 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.365:6627) : item=3 name=/dev/.udev/db/block:dm-1 inode=25432 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.365:6627) : item=2 name=/dev/.udev/db/block:dm-1.tmp inode=25900 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.365:6627) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.365:6627) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6627) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6627) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6628) : item=0 name=/dev/.udev/links/mapper\x2fsystem-root inode=25417 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6628) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6628) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=807fcd0 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6629) : item=0 name=/dev/mapper/system-root inode=25416 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6629) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6629) : arch=i386 syscall=readlink success=yes exit=7 a0=80779b0 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6630) : item=1 name=/dev/.udev/links/mapper\x2fsystem-root/b253:1 inode=25417 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.365:6630) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:01.365:6630) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6630) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=80779f4 a1=bff1da7c a2=807fcd0 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6631) : item=0 name=/dev/.udev/links/system\x2froot inode=25420 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6631) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6631) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=807fcd0 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6632) : item=0 name=/dev/system/root inode=25419 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6632) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6632) : arch=i386 syscall=readlink success=yes exit=7 a0=8085db8 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6633) : item=1 name=/dev/.udev/links/system\x2froot/b253:1 inode=25420 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.365:6633) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:01.365:6633) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6633) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=80779f4 a1=bff1da7c a2=807fcd0 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6634) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fdm-name-system-root inode=25423 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6634) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6634) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=807fcd0 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6635) : item=0 name=/dev/disk/by-id/dm-name-system-root inode=25422 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6635) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6635) : arch=i386 syscall=readlink success=yes exit=10 a0=8083fb8 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6636) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fdm-name-system-root/b253:1 inode=25423 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.365:6636) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:01.365:6636) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6636) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=80779f4 a1=bff1da7c a2=807fcd0 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6637) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fdm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUCYw1AE5HVgwstIEm3SWob3YqrIyYgsz5 inode=25426 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6637) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6637) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=807fcd0 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.365:6638) : item=0 name=/dev/disk/by-id/dm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUCYw1AE5HVgwstIEm3SWob3YqrIyYgsz5 inode=25425 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.365:6638) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.365:6638) : arch=i386 syscall=readlink success=yes exit=10 a0=8084058 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.369:6639) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fdm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUCYw1AE5HVgwstIEm3SWob3YqrIyYgsz5/b253:1 inode=25426 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.369:6639) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:01.369:6639) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.369:6639) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=80779f4 a1=bff1da7c a2=807fcd0 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.369:6640) : item=0 name=/dev/block/253:1 inode=25428 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.369:6640) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.369:6640) : arch=i386 syscall=readlink success=yes exit=7 a0=8083fe0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.369:6641) : item=0 name=/dev/.udev/watch/242 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.369:6641) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.369:6641) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=807fcd0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.369:6642) : item=2 name=/dev/.udev/watch/242 inode=25903 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.369:6642) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.369:6642) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:01.369:6642) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.369:6642) : arch=i386 syscall=symlink success=yes exit=0 a0=80779f4 a1=bff1fbfc a2=8068008 a3=807fcd0 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.369:6643) : item=1 name=/dev/.udev/db/block:dm-1.tmp inode=25904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.369:6643) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.369:6643) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.369:6643) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=80871f0 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.369:6644) : item=4 name=/dev/.udev/db/block:dm-1 inode=25904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.369:6644) : item=3 name=/dev/.udev/db/block:dm-1 inode=25900 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.369:6644) : item=2 name=/dev/.udev/db/block:dm-1.tmp inode=25904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.369:6644) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:01.369:6644) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.369:6644) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:01.369:6644) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:01.369:6645) : item=0 name=/dev/.udev/db/block:dm-1 inode=25904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:01.369:6645) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:59:01.369:6645) : arch=i386 syscall=open success=yes exit=5 a0=bfae2c7c a1=8000 a2=1b6 a3=806b6d8 items=1 ppid=4072 pid=4111 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:00.873:6598) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:00.873:6598) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:00.873:6598) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5103 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.701:6646) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.701:6646) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.701:6646) : arch=i386 syscall=open success=yes exit=12 a0=bfe9885c a1=8000 a2=1b6 a3=809dc38 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.701:6647) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.701:6647) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.701:6647) : arch=i386 syscall=open success=yes exit=12 a0=bfe9885c a1=8000 a2=1b6 a3=809e550 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.705:6648) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.705:6648) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.705:6648) : arch=i386 syscall=open success=yes exit=12 a0=bfe9882c a1=8000 a2=1b6 a3=80a7968 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.717:6649) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.717:6649) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.717:6649) : arch=i386 syscall=open success=yes exit=12 a0=bfe9882c a1=8000 a2=1b6 a3=80ab650 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.717:6650) : item=0 name=/dev/.udev/db/block:sda1 inode=25779 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.717:6650) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.717:6650) : arch=i386 syscall=open success=yes exit=12 a0=bfe9882c a1=8000 a2=1b6 a3=80ac7e8 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.721:6651) : item=0 name=/dev/.udev/db/block:sda2 inode=25704 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.721:6651) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.721:6651) : arch=i386 syscall=open success=yes exit=12 a0=bfe9882c a1=8000 a2=1b6 a3=80ae458 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.721:6652) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.721:6652) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.721:6652) : arch=i386 syscall=open success=yes exit=12 a0=bfe9882c a1=8000 a2=1b6 a3=80afa28 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.721:6653) : item=0 name=/dev/.udev/db/block:dm-0 inode=25865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.721:6653) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.721:6653) : arch=i386 syscall=open success=yes exit=12 a0=bfe9882c a1=8000 a2=1b6 a3=80b0a20 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.721:6654) : item=0 name=/dev/.udev/db/block:dm-1 inode=25904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.721:6654) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.721:6654) : arch=i386 syscall=open success=yes exit=12 a0=bfe9882c a1=8000 a2=1b6 a3=80b1228 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:02.725:6655) : item=0 name=/dev/.udev/db/block:dm-2 inode=25637 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:02.725:6655) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:02.725:6655) : arch=i386 syscall=open success=yes exit=12 a0=bfe9882c a1=8000 a2=1b6 a3=80b2900 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:04.999:6656) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:04.999:6656) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:04.999:6656) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:07.001:6657) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:07.001:6657) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:07.001:6657) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:09.003:6658) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:09.003:6658) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:09.003:6658) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:11.834:6660) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:11.834:6660) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:11.834:6660) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=8057170 a1=80 a2=bff40398 a3=8057170 items=1 ppid=4147 pid=5106 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mke2fs exe=/sbin/mke2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:11.002:6659) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:11.002:6659) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:11.002:6659) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:13.003:6661) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:13.003:6661) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:13.003:6661) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:15.002:6662) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:15.002:6662) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:15.002:6662) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:17.001:6663) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:17.001:6663) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:17.001:6663) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:19.001:6664) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:19.001:6664) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:19.001:6664) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:21.001:6665) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:21.001:6665) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:21.001:6665) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:23.002:6666) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:23.002:6666) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:23.002:6666) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:25.002:6667) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:25.002:6667) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:25.002:6667) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:27.003:6668) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:27.003:6668) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:27.003:6668) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:29.003:6669) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:29.003:6669) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:29.003:6669) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:31.003:6670) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:31.003:6670) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:31.003:6670) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:33.002:6671) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:33.002:6671) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:33.002:6671) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.002:6672) : item=0 name=/dev/sr0 inode=4035 dev=00:0e mode=block,660 ouid=root ogid=cdrom rdev=0b:00 
>type=CWD msg=audit(04/20/10 11:59:35.002:6672) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.002:6672) : arch=i386 syscall=open success=no exit=-16(Device or resource busy) a0=808b980 a1=8880 a2=0 a3=4 items=1 ppid=5102 pid=5114 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.365:6673) : item=0 name=/dev/.udev/db/block:dm-1 inode=25904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:35.365:6673) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.365:6673) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=8084238 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.369:6674) : item=0 name=/dev/.udev/db/block:dm-1 inode=25904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:35.369:6674) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.369:6674) : arch=i386 syscall=open success=yes exit=5 a0=bff1d55c a1=8000 a2=1b6 a3=8084408 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.369:6675) : item=0 name=/dev/.udev/watch/242 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:35.369:6675) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.369:6675) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1f71c a1=0 a2=8083cd8 a3=bff1f71c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.373:6676) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:35.373:6676) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.373:6676) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5115 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.709:6677) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:35.709:6677) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.709:6677) : arch=i386 syscall=open success=yes exit=3 a0=bfdc113c a1=8002 a2=0 a3=bfdc113c items=1 ppid=4812 pid=5115 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.718:6678) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:35.718:6678) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:35.718:6678) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5116 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.718:6679) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:35.718:6679) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.718:6679) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5117 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.738:6680) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:35.738:6680) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.738:6680) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5118 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.837:6681) : item=0 name=/dev/dm-1 inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:35.837:6681) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.837:6681) : arch=i386 syscall=open success=yes exit=3 a0=bfab5d57 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5118 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.849:6682) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:35.849:6682) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.849:6682) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5119 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.861:6683) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:35.861:6683) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.861:6683) : arch=i386 syscall=open success=yes exit=3 a0=bfd09e3c a1=8002 a2=0 a3=bfd09e3c items=1 ppid=4812 pid=5119 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.869:6684) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:35.869:6684) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.869:6684) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5120 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.878:6685) : item=0 name=/dev/dm-1 inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:35.878:6685) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.878:6685) : arch=i386 syscall=open success=yes exit=3 a0=bfc37c72 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5120 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.885:6686) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:35.885:6686) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.885:6686) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5121 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.925:6687) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:35.925:6687) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:35.925:6687) : arch=i386 syscall=open success=yes exit=3 a0=8052188 a1=8002 a2=0 a3=8052120 items=1 ppid=4147 pid=5116 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=tune2fs exe=/sbin/tune2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.929:6688) : item=0 name=/dev/system/root inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:35.929:6688) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:35.929:6688) : arch=i386 syscall=open success=yes exit=4 a0=8052070 a1=80 a2=bfa1d8d8 a3=8052070 items=1 ppid=4147 pid=5116 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=tune2fs exe=/sbin/tune2fs key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.941:6689) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:35.941:6689) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.941:6689) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4812 pid=5121 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.949:6690) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:35.949:6690) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.949:6690) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5122 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:35.965:6691) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:35.965:6691) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:35.965:6691) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5123 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.013:6740) : item=0 name=/dev/.udev/db/pci:0000:00:0d.0 inode=5806 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.013:6740) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.013:6740) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc4c a1=8000 a2=1b6 a3=809e550 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.141:6693) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:36.141:6693) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.141:6693) : arch=i386 syscall=open success=yes exit=3 a0=bff1b28c a1=8002 a2=0 a3=bff1b28c items=1 ppid=4812 pid=5123 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-dm-expor exe=/lib/udev/udisks-dm-export key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.017:6741) : item=0 name=/dev/.udev/db/block:sr0 inode=6022 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.017:6741) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.017:6741) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc1c a1=8000 a2=1b6 a3=80a7968 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.017:6742) : item=0 name=/dev/.udev/db/block:sda inode=25589 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.017:6742) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.017:6742) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc1c a1=8000 a2=1b6 a3=80ab650 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.021:6743) : item=0 name=/dev/.udev/db/block:sda1 inode=25779 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.021:6743) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.021:6743) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc1c a1=8000 a2=1b6 a3=80ac7e8 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.021:6744) : item=0 name=/dev/.udev/db/block:sda2 inode=25704 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.021:6744) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.021:6744) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc1c a1=8000 a2=1b6 a3=80ae458 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.021:6745) : item=0 name=/dev/.udev/db/block:fd0 inode=5928 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.021:6745) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.021:6745) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc1c a1=8000 a2=1b6 a3=80afa28 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.021:6746) : item=0 name=/dev/.udev/db/block:dm-0 inode=25865 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.021:6746) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.021:6746) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc1c a1=8000 a2=1b6 a3=80b0a20 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.021:6747) : item=0 name=/dev/.udev/db/block:dm-1 inode=25957 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.021:6747) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.021:6747) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc1c a1=8000 a2=1b6 a3=80b1228 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.021:6748) : item=0 name=/dev/.udev/db/block:dm-2 inode=25637 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.021:6748) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.021:6748) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc1c a1=8000 a2=1b6 a3=80b1940 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.086:6749) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.086:6749) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.086:6749) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5134 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.302:6750) : item=0 name=/dev/system/swap inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:59:38.302:6750) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.302:6750) : arch=i386 syscall=open success=yes exit=3 a0=bff62513 a1=8082 a2=0 a3=809f008 items=1 ppid=4147 pid=5134 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.310:6751) : item=0 name=/dev/mem inode=2874 dev=00:0e mode=character,640 ouid=root ogid=kmem rdev=01:01 
>type=CWD msg=audit(04/20/10 11:59:38.310:6751) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.310:6751) : arch=i386 syscall=open success=yes exit=4 a0=808eda0 a1=0 a2=0 a3=0 items=1 ppid=4147 pid=5134 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mdadm exe=/sbin/mdadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.314:6752) : item=0 name=/dev/.udev/db/block:dm-2 inode=25637 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.314:6752) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.314:6752) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=8085d98 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.318:6753) : item=0 name=/dev/.udev/db/block:dm-2 inode=25637 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.318:6753) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.318:6753) : arch=i386 syscall=open success=yes exit=5 a0=bff1d55c a1=8000 a2=1b6 a3=8084830 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.318:6754) : item=0 name=/dev/.udev/watch/231 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.318:6754) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.318:6754) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1f71c a1=0 a2=807fcd0 a3=bff1f71c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.318:6755) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.318:6755) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.318:6755) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5135 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.330:6756) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:38.330:6756) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.330:6756) : arch=i386 syscall=open success=yes exit=3 a0=bfcfeaec a1=8002 a2=0 a3=bfcfeaec items=1 ppid=4812 pid=5135 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.334:6757) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.334:6757) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.334:6757) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5136 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.346:6758) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.346:6758) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.346:6758) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5138 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.354:6759) : item=0 name=/dev/dm-2 inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:59:38.354:6759) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.354:6759) : arch=i386 syscall=open success=yes exit=3 a0=bf9fdd57 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5138 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.133:6692) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:36.133:6692) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:36.133:6692) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5124 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.145:6694) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:36.145:6694) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.145:6694) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5125 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.193:6695) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.193:6695) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:36.193:6695) : arch=i386 syscall=open success=yes exit=3 a0=bfb43bcc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5124 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.245:6696) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.245:6696) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:36.245:6696) : arch=i386 syscall=open success=yes exit=3 a0=bfb43bcc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5124 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.278:6697) : item=1 name=/dev/.udev/db/block:dm-1.tmp inode=25939 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.278:6697) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.278:6697) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.278:6697) : arch=i386 syscall=open success=yes exit=4 a0=bff1f224 a1=8241 a2=1b6 a3=8084b90 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.278:6698) : item=4 name=/dev/.udev/db/block:dm-1 inode=25939 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.278:6698) : item=3 name=/dev/.udev/db/block:dm-1 inode=25904 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.278:6698) : item=2 name=/dev/.udev/db/block:dm-1.tmp inode=25939 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.278:6698) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.278:6698) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.278:6698) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.278:6698) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.278:6699) : item=0 name=/dev/.udev/links/mapper\x2fsystem-root inode=25417 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.278:6699) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.278:6699) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8085ee0 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.278:6700) : item=0 name=/dev/mapper/system-root inode=25416 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.278:6700) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.278:6700) : arch=i386 syscall=readlink success=yes exit=7 a0=807fcf0 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.278:6701) : item=1 name=/dev/.udev/links/mapper\x2fsystem-root/b253:1 inode=25417 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.278:6701) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:36.278:6701) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.278:6701) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=80845e4 a1=bff1da7c a2=8085ee0 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6702) : item=0 name=/dev/.udev/links/system\x2froot inode=25420 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6702) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6702) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8085ee0 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6703) : item=0 name=/dev/system/root inode=25419 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6703) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6703) : arch=i386 syscall=readlink success=yes exit=7 a0=8077aa8 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6704) : item=1 name=/dev/.udev/links/system\x2froot/b253:1 inode=25420 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6704) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:36.282:6704) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6704) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=80845e4 a1=bff1da7c a2=8085ee0 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6705) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fdm-name-system-root inode=25423 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6705) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6705) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8085ee0 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6706) : item=0 name=/dev/disk/by-id/dm-name-system-root inode=25422 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6706) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6706) : arch=i386 syscall=readlink success=yes exit=10 a0=8083e38 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6707) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fdm-name-system-root/b253:1 inode=25423 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6707) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:36.282:6707) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6707) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=80845e4 a1=bff1da7c a2=8085ee0 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6708) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fdm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUCYw1AE5HVgwstIEm3SWob3YqrIyYgsz5 inode=25426 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6708) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6708) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8085ee0 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6709) : item=0 name=/dev/disk/by-id/dm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUCYw1AE5HVgwstIEm3SWob3YqrIyYgsz5 inode=25425 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6709) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6709) : arch=i386 syscall=readlink success=yes exit=10 a0=8080ab8 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6710) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fdm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUCYw1AE5HVgwstIEm3SWob3YqrIyYgsz5/b253:1 inode=25426 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6710) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:36.282:6710) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6710) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=80845e4 a1=bff1da7c a2=8085ee0 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6711) : item=2 name=/dev/disk/by-uuid/a0eb622e-9121-4452-ac40-2587014c4627 inode=25940 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6711) : item=1 name=/dev/disk/by-uuid/ inode=4680 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6711) : item=0 name=../../dm-1 
>type=CWD msg=audit(04/20/10 11:59:36.282:6711) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6711) : arch=i386 syscall=symlink success=yes exit=0 a0=bff1d5fc a1=8084238 a2=8068008 a3=bff1ea7c items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6712) : item=1 name=/dev/.udev/links/disk\x2fby-uuid\x2fa0eb622e-9121-4452-ac40-2587014c4627 inode=25941 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6712) : item=0 name=/dev/.udev/links/ inode=5781 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6712) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6712) : arch=i386 syscall=mkdir success=yes exit=0 a0=bff1d5fc a1=1ed a2=8066ff4 a3=bff1d5fc items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6713) : item=2 name=/dev/.udev/links/disk\x2fby-uuid\x2fa0eb622e-9121-4452-ac40-2587014c4627/b253:1 inode=25942 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6713) : item=1 name=/dev/.udev/links/disk\x2fby-uuid\x2fa0eb622e-9121-4452-ac40-2587014c4627/ inode=25941 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6713) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:36.282:6713) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6713) : arch=i386 syscall=symlink success=yes exit=0 a0=80845e4 a1=bff1da7c a2=8085ee0 a3=bff1da7c items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6714) : item=0 name=/dev/block/253:1 inode=25428 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6714) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6714) : arch=i386 syscall=readlink success=yes exit=7 a0=8080ba0 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6715) : item=0 name=/dev/.udev/watch/243 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6715) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6715) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8085ee0 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6716) : item=2 name=/dev/.udev/watch/243 inode=25945 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6716) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6716) : item=0 name=/devices/virtual/block/dm-1 
>type=CWD msg=audit(04/20/10 11:59:36.282:6716) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6716) : arch=i386 syscall=symlink success=yes exit=0 a0=80845e4 a1=bff1fbfc a2=8068008 a3=8085ee0 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6717) : item=1 name=/dev/.udev/db/block:dm-1.tmp inode=25946 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6717) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6717) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6717) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=8084b90 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6718) : item=4 name=/dev/.udev/db/block:dm-1 inode=25946 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6718) : item=3 name=/dev/.udev/db/block:dm-1 inode=25939 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6718) : item=2 name=/dev/.udev/db/block:dm-1.tmp inode=25946 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6718) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.282:6718) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6718) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6718) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6719) : item=0 name=/dev/.udev/db/block:dm-1 inode=25946 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6719) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6719) : arch=i386 syscall=open success=yes exit=5 a0=bfae2c7c a1=8000 a2=1b6 a3=806b6d8 items=1 ppid=4072 pid=4111 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.282:6720) : item=0 name=/dev/.udev/db/block:dm-1 inode=25946 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.282:6720) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.282:6720) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=8084830 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.286:6721) : item=0 name=/dev/.udev/db/block:dm-1 inode=25946 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.286:6721) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.286:6721) : arch=i386 syscall=open success=yes exit=5 a0=bff1d55c a1=8000 a2=1b6 a3=8084b90 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.286:6722) : item=0 name=/dev/.udev/watch/243 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.286:6722) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.286:6722) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1f71c a1=0 a2=8085ee0 a3=bff1f71c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.294:6723) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:36.294:6723) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.294:6723) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5126 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.294:6724) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.294:6724) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:36.294:6724) : arch=i386 syscall=open success=yes exit=3 a0=bfb43bcc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5124 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.302:6725) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:36.302:6725) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.302:6725) : arch=i386 syscall=open success=yes exit=3 a0=bf86911c a1=8002 a2=0 a3=bf86911c items=1 ppid=4812 pid=5126 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.302:6726) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:36.302:6726) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.302:6726) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5127 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.306:6727) : item=0 name=/dev/dm-1 inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=CWD msg=audit(04/20/10 11:59:36.306:6727) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.306:6727) : arch=i386 syscall=open success=yes exit=3 a0=bfd1edc4 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5127 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.318:6728) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:36.318:6728) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.318:6728) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5128 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.326:6729) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:36.326:6729) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.326:6729) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4812 pid=5128 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.338:6730) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:36.338:6730) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.338:6730) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5129 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.342:6731) : item=1 name=/dev/dm-1 inode=25415 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:01 
>type=PATH msg=audit(04/20/10 11:59:36.342:6731) : item=0 name=/dev/ inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.342:6731) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.342:6731) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1fbdc a1=bff1fb74 a2=8077b28 a3=8085ee0 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.342:6732) : item=1 name=/dev/.udev/db/block:dm-1.tmp inode=25957 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.342:6732) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.342:6732) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.342:6732) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=8085d98 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.342:6733) : item=4 name=/dev/.udev/db/block:dm-1 inode=25957 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.342:6733) : item=3 name=/dev/.udev/db/block:dm-1 inode=25946 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.342:6733) : item=2 name=/dev/.udev/db/block:dm-1.tmp inode=25957 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.342:6733) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:36.342:6733) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.342:6733) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.342:6733) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.346:6734) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.346:6734) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:36.346:6734) : arch=i386 syscall=open success=yes exit=3 a0=bfb43bcc a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5124 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.350:6735) : item=0 name=/dev/.udev/db/block:dm-1 inode=25957 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:36.350:6735) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:36.350:6735) : arch=i386 syscall=open success=yes exit=12 a0=bfe95f5c a1=8000 a2=1b6 a3=809a4c8 items=1 ppid=1 pid=5102 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.453:6736) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:36.453:6736) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:36.453:6736) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5130 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:36.461:6738) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:36.461:6738) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:36.461:6738) : arch=i386 syscall=open success=yes exit=3 a0=804f030 a1=8000 a2=0 a3=804f008 items=1 ppid=4147 pid=5130 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.013:6739) : item=0 name=/dev/.udev/db/pci:0000:00:01.1 inode=5790 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.013:6739) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.013:6739) : arch=i386 syscall=open success=yes exit=12 a0=bfa5bc4c a1=8000 a2=1b6 a3=809dc38 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.374:6760) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.374:6760) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.374:6760) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5137 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.378:6761) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.378:6761) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.378:6761) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5139 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.386:6762) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:38.386:6762) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.386:6762) : arch=i386 syscall=open success=yes exit=3 a0=bfe9272c a1=8002 a2=0 a3=bfe9272c items=1 ppid=4812 pid=5139 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.390:6763) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.390:6763) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.390:6763) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5140 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.394:6764) : item=0 name=/dev/dm-2 inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:59:38.394:6764) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.394:6764) : arch=i386 syscall=open success=yes exit=3 a0=bf88fd46 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5140 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.402:6765) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 11:59:38.402:6765) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.402:6765) : arch=i386 syscall=open success=yes exit=3 a0=b776ece4 a1=8000 a2=0 a3=bfe69048 items=1 ppid=4147 pid=5137 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mkswap exe=/sbin/mkswap key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.402:6766) : item=0 name=/dev/system/swap inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:59:38.402:6766) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.402:6766) : arch=i386 syscall=open success=yes exit=4 a0=bfe6a511 a1=8000 a2=0 a3=bfe6a511 items=1 ppid=4147 pid=5137 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mkswap exe=/sbin/mkswap key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.402:6767) : item=0 name=/dev/system/swap inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:59:38.402:6767) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.402:6767) : arch=i386 syscall=open success=yes exit=4 a0=bfe6a511 a1=8082 a2=0 a3=1 items=1 ppid=4147 pid=5137 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=mkswap exe=/sbin/mkswap key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.410:6768) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.410:6768) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.410:6768) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5141 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.422:6769) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.422:6769) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.422:6769) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4812 pid=5141 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.434:6770) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.434:6770) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.434:6770) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5142 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.442:6771) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:38.442:6771) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.442:6771) : arch=i386 syscall=open success=yes exit=3 a0=bfbcad6c a1=8002 a2=0 a3=bfbcad6c items=1 ppid=4812 pid=5142 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-dm-expor exe=/lib/udev/udisks-dm-export key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.450:6772) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.450:6772) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.450:6772) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5144 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.462:6773) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.462:6773) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.462:6773) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5143 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.474:6774) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.474:6774) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.474:6774) : arch=i386 syscall=open success=yes exit=3 a0=bf91768c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5143 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6775) : item=1 name=/dev/.udev/db/block:dm-2.tmp inode=26008 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6775) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6775) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6775) : arch=i386 syscall=open success=yes exit=4 a0=bff1f224 a1=8241 a2=1b6 a3=8086058 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6776) : item=4 name=/dev/.udev/db/block:dm-2 inode=26008 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6776) : item=3 name=/dev/.udev/db/block:dm-2 inode=25637 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6776) : item=2 name=/dev/.udev/db/block:dm-2.tmp inode=26008 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6776) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6776) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6776) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6776) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f224 a1=bff1f624 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6777) : item=0 name=/dev/.udev/links/mapper\x2fsystem-swap inode=25622 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6777) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6777) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8079c88 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6778) : item=0 name=/dev/mapper/system-swap inode=25621 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6778) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6778) : arch=i386 syscall=readlink success=yes exit=7 a0=8077b58 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6779) : item=1 name=/dev/.udev/links/mapper\x2fsystem-swap/b253:2 inode=25622 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6779) : item=0 name=/devices/virtual/block/dm-2 
>type=CWD msg=audit(04/20/10 11:59:38.482:6779) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6779) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8086004 a1=bff1da7c a2=8079c88 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6780) : item=0 name=/dev/.udev/links/system\x2fswap inode=25625 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6780) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6780) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8079c88 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6781) : item=0 name=/dev/system/swap inode=25624 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6781) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6781) : arch=i386 syscall=readlink success=yes exit=7 a0=8084460 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6782) : item=1 name=/dev/.udev/links/system\x2fswap/b253:2 inode=25625 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6782) : item=0 name=/devices/virtual/block/dm-2 
>type=CWD msg=audit(04/20/10 11:59:38.482:6782) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6782) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8086004 a1=bff1da7c a2=8079c88 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6783) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fdm-name-system-swap inode=25628 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6783) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6783) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8079c88 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6784) : item=0 name=/dev/disk/by-id/dm-name-system-swap inode=25627 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6784) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6784) : arch=i386 syscall=readlink success=yes exit=10 a0=8084718 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6785) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fdm-name-system-swap/b253:2 inode=25628 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6785) : item=0 name=/devices/virtual/block/dm-2 
>type=CWD msg=audit(04/20/10 11:59:38.482:6785) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6785) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8086004 a1=bff1da7c a2=8079c88 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6786) : item=0 name=/dev/.udev/links/disk\x2fby-id\x2fdm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUlu8za9GBme4EqN1zM0PsheOSwXWIIC3P inode=25631 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6786) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6786) : arch=i386 syscall=open success=yes exit=4 a0=bff1ee7c a1=98800 a2=8079c88 a3=bff1da7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6787) : item=0 name=/dev/disk/by-id/dm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUlu8za9GBme4EqN1zM0PsheOSwXWIIC3P inode=25630 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6787) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6787) : arch=i386 syscall=readlink success=yes exit=10 a0=8083e60 a1=bff1d1fc a2=400 a3=bff1d1fc items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6788) : item=1 name=/dev/.udev/links/disk\x2fby-id\x2fdm-uuid-LVM-mIUz7ixAFvngsGZ7VpVogFJMMcK18vdUlu8za9GBme4EqN1zM0PsheOSwXWIIC3P/b253:2 inode=25631 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6788) : item=0 name=/devices/virtual/block/dm-2 
>type=CWD msg=audit(04/20/10 11:59:38.482:6788) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6788) : arch=i386 syscall=symlink success=no exit=-17(File exists) a0=8086004 a1=bff1da7c a2=8079c88 a3=bff1da7c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6789) : item=0 name=/dev/block/253:2 inode=25633 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6789) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6789) : arch=i386 syscall=readlink success=yes exit=7 a0=8084478 a1=bff1ee7c a2=400 a3=bff1ee7c items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6790) : item=0 name=/dev/.udev/watch/244 inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6790) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6790) : arch=i386 syscall=unlink success=no exit=-2(No such file or directory) a0=bff1fbfc a1=bff1f73c a2=8068008 a3=8079c88 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6791) : item=2 name=/dev/.udev/watch/244 inode=26011 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6791) : item=1 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6791) : item=0 name=/devices/virtual/block/dm-2 
>type=CWD msg=audit(04/20/10 11:59:38.482:6791) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6791) : arch=i386 syscall=symlink success=yes exit=0 a0=8086004 a1=bff1fbfc a2=8068008 a3=8079c88 items=3 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6792) : item=1 name=/dev/.udev/db/block:dm-2.tmp inode=26012 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6792) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6792) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6792) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=8086038 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6793) : item=4 name=/dev/.udev/db/block:dm-2 inode=26012 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6793) : item=3 name=/dev/.udev/db/block:dm-2 inode=26008 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6793) : item=2 name=/dev/.udev/db/block:dm-2.tmp inode=26012 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6793) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6793) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6793) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6793) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6794) : item=0 name=/dev/.udev/db/block:dm-2 inode=26012 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6794) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6794) : arch=i386 syscall=open success=yes exit=5 a0=bfae2c7c a1=8000 a2=1b6 a3=806b6e8 items=1 ppid=4072 pid=4111 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6795) : item=0 name=/dev/.udev/db/block:dm-2 inode=26012 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6795) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6795) : arch=i386 syscall=open success=yes exit=4 a0=bff1f70c a1=8000 a2=1b6 a3=8083e00 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6796) : item=0 name=/dev/.udev/db/block:dm-2 inode=26012 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6796) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6796) : arch=i386 syscall=open success=yes exit=5 a0=bff1d55c a1=8000 a2=1b6 a3=80847f8 items=1 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6797) : item=1 name=/dev/.udev/watch/244 inode=26011 dev=00:0e mode=link,777 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.482:6797) : item=0 name=/dev/.udev/watch/ inode=5444 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6797) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6797) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1f71c a1=0 a2=8087368 a3=bff1f71c items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.482:6798) : item=0 name=/dev/.udev/db/block:dm-2 inode=26012 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.482:6798) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.482:6798) : arch=i386 syscall=open success=yes exit=12 a0=bfa5934c a1=8000 a2=1b6 a3=809a4c8 items=1 ppid=1 pid=5132 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udisks-daemon exe=/usr/lib/udisks/udisks-daemon key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.486:6799) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.486:6799) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.486:6799) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5145 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.494:6800) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:38.494:6800) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.494:6800) : arch=i386 syscall=open success=yes exit=3 a0=bffc070c a1=8002 a2=0 a3=bffc070c items=1 ppid=4812 pid=5145 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.502:6801) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.502:6801) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.502:6801) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5146 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.510:6802) : item=0 name=/dev/dm-2 inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=CWD msg=audit(04/20/10 11:59:38.510:6802) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.510:6802) : arch=i386 syscall=open success=yes exit=3 a0=bffecdc4 a1=8000 a2=0 a3=804f008 items=1 ppid=4812 pid=5146 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.522:6803) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.522:6803) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.522:6803) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5147 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.526:6804) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.526:6804) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.526:6804) : arch=i386 syscall=open success=yes exit=3 a0=bf91768c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5143 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.530:6805) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.530:6805) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.530:6805) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4812 pid=5147 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=kpartx_id exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.542:6806) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.542:6806) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.542:6806) : arch=i386 syscall=open success=yes exit=4 a0=8061d23 a1=8002 a2=0 a3=8068008 items=1 ppid=4812 pid=5148 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.550:6807) : item=1 name=/dev/dm-2 inode=25620 dev=00:0e mode=block,660 ouid=root ogid=disk rdev=fd:02 
>type=PATH msg=audit(04/20/10 11:59:38.550:6807) : item=0 name=/dev/ inode=2777 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.550:6807) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.550:6807) : arch=i386 syscall=unlink success=yes exit=0 a0=bff1fbdc a1=bff1fb74 a2=80874f0 a3=8087368 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.550:6808) : item=1 name=/dev/.udev/db/block:dm-2.tmp inode=26023 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.550:6808) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.550:6808) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.550:6808) : arch=i386 syscall=open success=yes exit=4 a0=bff1f714 a1=8241 a2=1b6 a3=8083e00 items=2 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.550:6809) : item=4 name=/dev/.udev/db/block:dm-2 inode=26023 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.550:6809) : item=3 name=/dev/.udev/db/block:dm-2 inode=26012 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.550:6809) : item=2 name=/dev/.udev/db/block:dm-2.tmp inode=26023 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.550:6809) : item=1 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=PATH msg=audit(04/20/10 11:59:38.550:6809) : item=0 name=/dev/.udev/db/ inode=5363 dev=00:0e mode=dir,755 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.550:6809) :  cwd=/ 
>type=SYSCALL msg=audit(04/20/10 11:59:38.550:6809) : arch=i386 syscall=rename success=yes exit=0 a0=bff1f714 a1=bff1fb14 a2=8066ff4 a3=0 items=5 ppid=1044 pid=4812 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4294967295 comm=udevd exe=/sbin/udevd key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.578:6811) : item=0 name=/dev/.udev/queue.bin inode=25638 dev=00:0e mode=file,644 ouid=root ogid=root rdev=00:00 
>type=CWD msg=audit(04/20/10 11:59:38.578:6811) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.578:6811) : arch=i386 syscall=open success=yes exit=3 a0=bf91768c a1=8000 a2=1b6 a3=806b210 items=1 ppid=4147 pid=5143 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=udevadm exe=/sbin/udevadm key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.622:6812) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.622:6812) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.622:6812) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5149 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.626:6813) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 11:59:38.626:6813) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.626:6813) : arch=i386 syscall=open success=yes exit=3 a0=804f030 a1=8000 a2=0 a3=804f008 items=1 ppid=4147 pid=5149 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=blkid exe=/sbin/blkid key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.657:6814) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.657:6814) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.657:6814) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.669:6815) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:38.669:6815) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.669:6815) : arch=i386 syscall=open success=yes exit=3 a0=bfe0bc6c a1=8002 a2=0 a3=bfe0bc6c items=1 ppid=4147 pid=5150 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.709:6816) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.709:6816) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.709:6816) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5151 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.717:6817) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:38.717:6817) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.717:6817) : arch=i386 syscall=open success=yes exit=3 a0=bfb49afc a1=8002 a2=0 a3=bfb49afc items=1 ppid=4147 pid=5151 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.750:6818) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 11:59:38.750:6818) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.750:6818) : arch=i386 syscall=open success=no exit=-6(No such device or address) a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=4147 pid=5152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 11:59:38.758:6819) : item=0 name=/dev/mapper/control inode=3980 dev=00:0e mode=character,660 ouid=root ogid=root rdev=0a:3b 
>type=CWD msg=audit(04/20/10 11:59:38.758:6819) :  cwd=/home/linux 
>type=SYSCALL msg=audit(04/20/10 11:59:38.758:6819) : arch=i386 syscall=open success=yes exit=3 a0=bfb38d3c a1=8002 a2=0 a3=bfb38d3c items=1 ppid=4147 pid=5152 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=dmsetup exe=/sbin/dmsetup key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:37.845:6821) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:01:37.845:6821) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:37.845:6821) : arch=i386 syscall=open success=yes exit=3 a0=8063897 a1=8000 a2=0 a3=0 items=1 ppid=4072 pid=5157 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=less exe=/usr/bin/less key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:37.857:6822) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:01:37.857:6822) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:37.857:6822) : arch=i386 syscall=open success=yes exit=4 a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=5157 pid=5158 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:37.945:6823) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:01:37.945:6823) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:37.945:6823) : arch=i386 syscall=open success=yes exit=4 a0=80bfcdb a1=8802 a2=0 a3=0 items=1 ppid=5157 pid=5158 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=lessopen.sh exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:38.049:6824) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 12:01:38.049:6824) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:38.049:6824) : arch=i386 syscall=open success=yes exit=4 a0=804dfcf a1=8000 a2=1b6 a3=80520f0 items=1 ppid=5158 pid=5161 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=mktemp exe=/bin/mktemp key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:38.057:6825) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 12:01:38.057:6825) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:38.057:6825) : arch=i386 syscall=open success=yes exit=4 a0=804dfcf a1=8000 a2=1b6 a3=80520f0 items=1 ppid=5158 pid=5162 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=mktemp exe=/bin/mktemp key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:37.205:6820) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 12:01:37.205:6820) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:37.205:6820) : arch=i386 syscall=open success=yes exit=3 a0=810e490 a1=8241 a2=1b6 a3=0 items=1 ppid=4072 pid=5155 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=bash exe=/bin/bash key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:59.321:6827) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 12:01:59.321:6827) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:59.321:6827) : arch=i386 syscall=open success=yes exit=3 a0=b77067d5 a1=8002 a2=0 a3=0 items=1 ppid=5168 pid=5169 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=ssh exe=/usr/bin/ssh key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:59.357:6828) : item=0 name=/dev/urandom inode=2790 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:09 
>type=CWD msg=audit(04/20/10 12:01:59.357:6828) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:59.357:6828) : arch=i386 syscall=open success=yes exit=3 a0=b762475f a1=900 a2=38 a3=0 items=1 ppid=5168 pid=5169 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=ssh exe=/usr/bin/ssh key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:59.469:6829) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:01:59.469:6829) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:59.469:6829) : arch=i386 syscall=open success=yes exit=4 a0=b770ebb3 a1=8002 a2=0 a3=1 items=1 ppid=5168 pid=5169 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=ssh exe=/usr/bin/ssh key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:59.469:6830) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:01:59.469:6830) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:59.469:6830) : arch=i386 syscall=open success=yes exit=4 a0=b770ebb3 a1=8002 a2=0 a3=1 items=1 ppid=5168 pid=5169 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=ssh exe=/usr/bin/ssh key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:01:59.209:6826) : item=0 name=/dev/null inode=2786 dev=00:0e mode=character,666 ouid=root ogid=root rdev=01:03 
>type=CWD msg=audit(04/20/10 12:01:59.209:6826) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:01:59.209:6826) : arch=i386 syscall=open success=yes exit=3 a0=b78b06ac a1=8002 a2=0 a3=0 items=1 ppid=4072 pid=5168 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=scp exe=/usr/bin/scp key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:02:02.857:6832) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:02:02.857:6832) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:02:02.857:6832) : arch=i386 syscall=open success=yes exit=4 a0=b770ebb3 a1=8002 a2=0 a3=0 items=1 ppid=5168 pid=5169 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=ssh exe=/usr/bin/ssh key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:02:02.857:6831) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:02:02.857:6831) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:02:02.857:6831) : arch=i386 syscall=open success=yes exit=4 a0=b770ebb3 a1=8002 a2=0 a3=0 items=1 ppid=5168 pid=5169 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts3 ses=1 comm=ssh exe=/usr/bin/ssh key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:02:19.510:6833) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:02:19.510:6833) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:02:19.510:6833) : arch=i386 syscall=open success=yes exit=3 a0=8063897 a1=8000 a2=0 a3=0 items=1 ppid=3552 pid=5172 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 ses=1 comm=less exe=/usr/bin/less key=dev-watcher 
>----
>type=PATH msg=audit(04/20/10 12:02:35.021:6834) : item=0 name=/dev/tty inode=2779 dev=00:0e mode=character,666 ouid=root ogid=tty rdev=05:00 
>type=CWD msg=audit(04/20/10 12:02:35.021:6834) :  cwd=/root 
>type=SYSCALL msg=audit(04/20/10 12:02:35.021:6834) : arch=i386 syscall=open success=yes exit=3 a0=8063897 a1=8000 a2=0 a3=0 items=1 ppid=3552 pid=5174 auid=linux uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 ses=1 comm=less exe=/usr/bin/less key=dev-watcher

Actions: View

Attachments on bug 598193: 355651 | 355652 | 355653 | 363965 | 370040 | 374064