system log when keyring unlock was working

working.txt (text/plain), 31.39 KB, created by Gregory Beauregard on 2020-10-10 16:45:46 UTC

Oct 07 23:36:49 ares kernel: Initialise system trusted keyrings
Oct 07 23:36:49 ares systemd[1]: systemd 246 running in system mode. (+PAM +AUDIT -SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL -XZ +LZ4 +ZSTD +SECCOMP +BLKID -ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=hybrid)
Oct 07 23:36:49 ares systemd[1]: /lib/systemd/system/lightdm.service:8: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether.
Oct 07 23:36:54 ares dbus-daemon[2556]: [system] Activating via systemd: service name='org.freedesktop.login1' unit='dbus-org.freedesktop.login1.service' requested by ':1.6' (uid=0 pid=2573 comm="/usr/sbin/lightdm ")
Oct 07 23:36:54 ares audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='unit=lightdm comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Oct 07 23:36:54 ares dbus-daemon[2556]: [system] Activating via systemd: service name='org.freedesktop.Accounts' unit='accounts-daemon.service' requested by ':1.6' (uid=0 pid=2573 comm="/usr/sbin/lightdm ")
Oct 07 23:36:56 ares audit[2719]: CRED_ACQ pid=2719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:setcred grantors=pam_tally2,pam_shells,pam_env,pam_unix,pam_permit acct="root" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success'
Oct 07 23:36:56 ares audit[2723]: USER_ACCT pid=2723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Oct 07 23:36:56 ares audit[2723]: CRED_ACQ pid=2723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:setcred grantors=? acct="root" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 07 23:36:56 ares audit[2723]: USER_START pid=2723 uid=0 auid=0 ses=2 subj==unconfined msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_systemd acct="root" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Oct 07 23:36:56 ares systemd-xdg-autostart-generator[2728]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dssh-autostart.service, startup phases are not supported.
Oct 07 23:36:56 ares systemd-xdg-autostart-generator[2728]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dpkcs11-autostart.service, startup phases are not supported.
Oct 07 23:36:56 ares systemd-xdg-autostart-generator[2728]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dsecrets-autostart.service, startup phases are not supported.
Oct 07 23:36:56 ares lightdm[2719]: pam_unix(lightdm-greeter:session): session opened for user root(uid=0) by (uid=0)
Oct 07 23:36:56 ares audit[2719]: USER_START pid=2719 uid=0 auid=0 ses=1 subj==unconfined msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_systemd,pam_limits,pam_env,pam_unix,pam_permit,pam_mail acct="root" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success'
Oct 07 23:36:56 ares dbus-daemon[2735]: [session uid=0 pid=2733] Activating service name='org.a11y.Bus' requested by ':1.0' (uid=0 pid=2729 comm="/usr/sbin/lightdm-gtk-greeter ")
Oct 07 23:36:57 ares org.a11y.Bus[2742]: dbus-daemon[2742]: Activating service name='org.a11y.atspi.Registry' requested by ':1.0' (uid=0 pid=2729 comm="/usr/sbin/lightdm-gtk-greeter ")
Oct 07 23:37:12 ares lightdm[2758]: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=  user=gregory
Oct 07 23:37:12 ares audit[2758]: USER_AUTH pid=2758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:authentication grantors=? acct="gregory" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=failed'
Oct 07 23:37:12 ares lightdm[2758]: gkr-pam: unable to locate daemon control file
Oct 07 23:37:12 ares lightdm[2758]: gkr-pam: stashed password to try later in open session
Oct 07 23:37:14 ares audit[2758]: USER_LOGIN pid=2758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=login acct="gregory" exe="/usr/sbin/lightdm" hostname=ares addr=? terminal=/dev/tty7 res=failed'
Oct 07 23:37:17 ares lightdm[2790]: gkr-pam: unable to locate daemon control file
Oct 07 23:37:17 ares audit[2790]: USER_AUTH pid=2790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:authentication grantors=pam_tally2,pam_shells,pam_unix,pam_permit,pam_gnome_keyring acct="gregory" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success'
Oct 07 23:37:17 ares lightdm[2790]: gkr-pam: stashed password to try later in open session
Oct 07 23:37:17 ares audit[2790]: USER_ACCT pid=2790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_permit,pam_tally2 acct="gregory" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success'
Oct 07 23:37:17 ares lightdm[2719]: pam_unix(lightdm-greeter:session): session closed for user root
Oct 07 23:37:17 ares audit[2719]: USER_END pid=2719 uid=0 auid=0 ses=1 subj==unconfined msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_systemd,pam_limits,pam_env,pam_unix,pam_permit,pam_mail acct="root" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success'
Oct 07 23:37:17 ares audit[2719]: CRED_DISP pid=2719 uid=0 auid=0 ses=1 subj==unconfined msg='op=PAM:setcred grantors=pam_tally2,pam_shells,pam_env,pam_unix,pam_permit acct="root" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success'
Oct 07 23:37:17 ares audit[2790]: CRED_ACQ pid=2790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:setcred grantors=pam_tally2,pam_shells,pam_unix,pam_permit,pam_gnome_keyring acct="gregory" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success'
Oct 07 23:37:17 ares audit[2795]: USER_ACCT pid=2795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:accounting grantors=pam_unix acct="gregory" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Oct 07 23:37:17 ares audit[2795]: CRED_ACQ pid=2795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:setcred grantors=? acct="gregory" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 07 23:37:17 ares audit[2795]: USER_START pid=2795 uid=0 auid=1000 ses=4 subj==unconfined msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_systemd acct="gregory" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Oct 07 23:37:17 ares systemd[2800]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dsecrets-autostart.service, startup phases are not supported.
Oct 07 23:37:17 ares systemd[2800]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dpkcs11-autostart.service, startup phases are not supported.
Oct 07 23:37:17 ares systemd[2800]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dssh-autostart.service, startup phases are not supported.
Oct 07 23:37:17 ares lightdm[2790]: pam_unix(lightdm:session): session opened for user gregory(uid=1000) by (uid=0)
Oct 07 23:37:17 ares lightdm[2790]: gkr-pam: gnome-keyring-daemon started properly and unlocked keyring
Oct 07 23:37:17 ares audit[2790]: USER_START pid=2790 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_systemd,pam_limits,pam_env,pam_unix,pam_permit,pam_mail,pam_gnome_keyring acct="gregory" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success'
Oct 07 23:37:17 ares audit[2790]: USER_LOGIN pid=2790 uid=0 auid=1000 ses=3 subj==unconfined msg='op=login id=1000 exe="/usr/sbin/lightdm" hostname=ares addr=? terminal=/dev/tty7 res=success'
Oct 07 23:37:18 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 07 23:37:18 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 07 23:37:18 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 07 23:37:27 ares audit[2724]: CRED_DISP pid=2724 uid=0 auid=0 ses=2 subj==unconfined msg='op=PAM:setcred grantors=? acct="root" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 07 23:37:31 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 07 23:37:32 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 07 23:40:06 ares audit[5028]: USER_AUTH pid=5028 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success'
Oct 07 23:40:06 ares audit[5028]: USER_ACCT pid=5028 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success'
Oct 07 23:40:06 ares audit[5028]: CRED_REFR pid=5028 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success'
Oct 07 23:40:06 ares sudo[5028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 07 23:40:06 ares audit[5028]: USER_START pid=5028 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success'
Oct 07 23:40:16 ares sudo[5028]: pam_unix(sudo:session): session closed for user root
Oct 07 23:40:16 ares audit[5028]: USER_END pid=5028 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success'
Oct 07 23:40:16 ares audit[5028]: CRED_DISP pid=5028 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success'
Oct 08 00:00:11 ares audit[7831]: USER_AUTH pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:authentication grantors=pam_rootok acct="man" exe="/bin/su" hostname=? addr=? terminal=??? res=success'
Oct 08 00:00:11 ares audit[7831]: USER_ACCT pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="man" exe="/bin/su" hostname=? addr=? terminal=??? res=success'
Oct 08 00:00:11 ares audit[7831]: CRED_ACQ pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:setcred grantors=pam_rootok acct="man" exe="/bin/su" hostname=? addr=? terminal=??? res=success'
Oct 08 00:00:11 ares audit[7833]: USER_ACCT pid=7833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:accounting grantors=pam_unix acct="man" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Oct 08 00:00:11 ares audit[7833]: CRED_ACQ pid=7833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:setcred grantors=? acct="man" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Oct 08 00:00:11 ares audit[7833]: USER_START pid=7833 uid=0 auid=13 ses=5 subj==unconfined msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_systemd acct="man" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Oct 08 00:00:11 ares systemd[7838]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dpkcs11-autostart.service, startup phases are not supported.
Oct 08 00:00:11 ares systemd[7838]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dssh-autostart.service, startup phases are not supported.
Oct 08 00:00:11 ares systemd[7838]: Not generating service for XDG autostart app-gnome\x2dkeyring\x2dsecrets-autostart.service, startup phases are not supported.
Oct 08 00:00:11 ares su[7831]: pam_unix(su:session): session opened for user man(uid=13) by (uid=0)
Oct 08 00:00:11 ares audit[7831]: USER_START pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit,pam_env,pam_xauth acct="man" exe="/bin/su" hostname=? addr=? terminal=??? res=success'
Oct 08 00:00:27 ares su[7831]: pam_unix(su:session): session closed for user man
Oct 08 00:00:27 ares audit[7831]: USER_END pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit,pam_env,pam_xauth acct="man" exe="/bin/su" hostname=? addr=? terminal=??? res=success'
Oct 08 00:00:27 ares audit[7831]: CRED_DISP pid=7831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=PAM:setcred grantors=pam_rootok acct="man" exe="/bin/su" hostname=? addr=? terminal=??? res=success'
Oct 08 00:16:02 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 00:16:02 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 00:16:02 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 00:16:02 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 00:16:02 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 00:16:02 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 01:16:47 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 01:16:47 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 01:16:47 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 01:16:47 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 01:16:47 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 01:16:47 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:16:21 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:16:21 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:16:21 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:16:21 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:16:21 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:16:21 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:16:28 ares sudo[51602]: pam_unix(sudo:auth): conversation failed
Oct 08 03:16:28 ares audit[51602]: USER_AUTH pid=51602 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=failed'
Oct 08 03:16:28 ares sudo[51602]: pam_unix(sudo:auth): auth could not identify password for [gregory]
Oct 08 03:16:32 ares audit[51666]: USER_AUTH pid=51666 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:32 ares audit[51666]: USER_ACCT pid=51666 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:32 ares audit[51666]: CRED_REFR pid=51666 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:32 ares sudo[51666]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 08 03:16:32 ares audit[51666]: USER_START pid=51666 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:32 ares sudo[51666]: pam_unix(sudo:session): session closed for user root
Oct 08 03:16:32 ares audit[51666]: USER_END pid=51666 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:32 ares audit[51666]: CRED_DISP pid=51666 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:59 ares audit[51811]: USER_ACCT pid=51811 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:59 ares audit[51811]: CRED_REFR pid=51811 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:59 ares sudo[51811]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 08 03:16:59 ares audit[51811]: USER_START pid=51811 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:59 ares sudo[51811]: pam_unix(sudo:session): session closed for user root
Oct 08 03:16:59 ares audit[51811]: USER_END pid=51811 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:16:59 ares audit[51811]: CRED_DISP pid=51811 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:05 ares audit[51890]: USER_ACCT pid=51890 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:05 ares audit[51890]: CRED_REFR pid=51890 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:05 ares sudo[51890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 08 03:17:05 ares audit[51890]: USER_START pid=51890 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:05 ares sudo[51890]: pam_unix(sudo:session): session closed for user root
Oct 08 03:17:05 ares audit[51890]: USER_END pid=51890 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:05 ares audit[51890]: CRED_DISP pid=51890 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:10 ares audit[51945]: USER_ACCT pid=51945 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:10 ares audit[51945]: CRED_REFR pid=51945 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:10 ares sudo[51945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 08 03:17:10 ares audit[51945]: USER_START pid=51945 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:11 ares sudo[51945]: pam_unix(sudo:session): session closed for user root
Oct 08 03:17:11 ares audit[51945]: USER_END pid=51945 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:17:11 ares audit[51945]: CRED_DISP pid=51945 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:26:17 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:26:17 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:26:17 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:26:17 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:26:17 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:26:17 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:26:38 ares sudo[54929]: pam_unix(sudo:auth): authentication failure; logname= uid=1000 euid=0 tty=/dev/pts/10 ruser=gregory rhost=  user=gregory
Oct 08 03:26:38 ares audit[54929]: USER_AUTH pid=54929 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=failed'
Oct 08 03:26:44 ares audit[54929]: USER_AUTH pid=54929 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=failed'
Oct 08 03:26:48 ares audit[54929]: USER_AUTH pid=54929 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:26:48 ares audit[54929]: USER_ACCT pid=54929 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:26:48 ares audit[54929]: CRED_REFR pid=54929 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:26:48 ares sudo[54929]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 08 03:26:48 ares audit[54929]: USER_START pid=54929 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:30:06 ares sudo[54929]: pam_unix(sudo:session): session closed for user root
Oct 08 03:30:06 ares audit[54929]: USER_END pid=54929 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:30:06 ares audit[54929]: CRED_DISP pid=54929 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/10 res=success'
Oct 08 03:39:05 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:39:05 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:39:05 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:39:06 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:39:06 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:39:06 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:39:12 ares audit[60107]: USER_AUTH pid=60107 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/13 res=success'
Oct 08 03:39:12 ares audit[60107]: USER_ACCT pid=60107 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/13 res=success'
Oct 08 03:39:12 ares audit[60107]: CRED_REFR pid=60107 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/13 res=success'
Oct 08 03:39:12 ares sudo[60107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 08 03:39:12 ares audit[60107]: USER_START pid=60107 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/13 res=success'
Oct 08 03:39:12 ares sudo[60107]: pam_unix(sudo:session): session closed for user root
Oct 08 03:39:12 ares audit[60107]: USER_END pid=60107 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/13 res=success'
Oct 08 03:39:12 ares audit[60107]: CRED_DISP pid=60107 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/13 res=success'
Oct 08 03:59:20 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:59:20 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:59:20 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:59:26 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:59:26 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:59:26 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:59:43 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:59:43 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:59:43 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:59:48 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:59:48 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:59:48 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 03:59:49 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 03:59:49 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 03:59:49 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 04:12:02 ares audit[71439]: USER_AUTH pid=71439 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:12:02 ares audit[71439]: USER_ACCT pid=71439 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:12:02 ares audit[71439]: CRED_REFR pid=71439 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:12:02 ares sudo[71439]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 08 04:12:02 ares audit[71439]: USER_START pid=71439 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:12:07 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 04:12:07 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized
Oct 08 04:12:07 ares gnome-keyring-daemon[2803]: The PKCS#11 component was already initialized
Oct 08 04:12:20 ares sudo[71439]: pam_unix(sudo:session): session closed for user root
Oct 08 04:12:20 ares audit[71439]: USER_END pid=71439 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:12:20 ares audit[71439]: CRED_DISP pid=71439 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:12:27 ares audit[71724]: USER_ACCT pid=71724 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:accounting grantors=pam_unix,pam_permit acct="gregory" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:12:27 ares audit[71724]: CRED_REFR pid=71724 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:12:27 ares sudo[71724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Oct 08 04:12:27 ares audit[71724]: USER_START pid=71724 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_open grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:21:06 ares sudo[71724]: pam_unix(sudo:session): session closed for user root
Oct 08 04:21:06 ares audit[71724]: USER_END pid=71724 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:session_close grantors=pam_systemd,pam_limits,pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:21:06 ares audit[71724]: CRED_DISP pid=71724 uid=0 auid=1000 ses=3 subj==unconfined msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'
Oct 08 04:26:36 ares gnome-keyring-daemon[2803]: The SSH agent was already initialized
Oct 08 04:26:36 ares gnome-keyring-daemon[2803]: The Secret Service was already initialized