View Issue Details

IDProjectCategoryView StatusLast Update
0014693CentOS-7glibcpublic2019-07-19 15:18
Reportermeehanto 
PrioritynormalSeveritycrashReproducibilityalways
Status closedResolutionnot fixable 
Product Version7.4.1708 
Target VersionFixed in Version 
Summary0014693: Race while upgrading glibc with yum causes segfaults
Description* Summary

We have observed a race condition while upgrading to glibc-2.17-196.el7_4.2.x86_64. Processes, like ps, sudo, getent, and rpm, can segfault during an upgrade of glibc. This problem is particularly troublesome when it occurs to yum while it holds the lock.

I apologize if a bug is already known for this issue. I was not able to locate an existing bug.

* Version Info

[root@localhost ~]# cat /etc/centos-release
CentOS Linux release 7.4.1708 (Core)
[root@localhost ~]# uname -a
Linux localhost.localdomain 3.10.0-693.el7.x86_64 #1 SMP Tue Aug 22 21:09:27 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost ~]# rpm -qa | grep glibc
glibc-debuginfo-2.17-196.el7_4.2.x86_64
glibc-2.17-196.el7.x86_64
glibc-2.17-196.el7_4.2.x86_64
glibc-debuginfo-common-2.17-196.el7_4.2.x86_64
glibc-common-2.17-196.el7.x86_64
glibc-common-2.17-196.el7_4.2.x86_64
[root@localhost ~]# cat /proc/cpuinfo | grep processor
processor : 0
processor : 1
[root@localhost ~]# cat /proc/meminfo
MemTotal: 1241384 kB
MemFree: 374348 kB
MemAvailable: 848960 kB

* Details

My theory is any executable that is loaded after ld-2.17.so is updated on disk but before libc-2.17.so is updated on disk will crash.

Let's first take a look at the audit logs. I created these two audit rules:

auditctl -w /lib64/ld-2.17.so -p rawx
auditctl -w /lib64/libc-2.17.so -p rawx

----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.073:6597): proctitle="ps"
type=PATH msg=audit(1523930506.073:6597): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.073:6597): cwd="/root"
type=SYSCALL msg=audit(1523930506.073:6597): arch=c000003e syscall=2 success=yes exit=3 a0=7f49f52be4b0 a1=80000 a2=7f49f52ef150 a3=7f49f52be4b0 items=1 ppid=10524 pid=13540 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.077:6598): proctitle="ps"
type=PATH msg=audit(1523930506.077:6598): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2235 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.077:6598): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.077:6598): cwd="/root"
type=EXECVE msg=audit(1523930506.077:6598): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.077:6598): arch=c000003e syscall=59 success=yes exit=0 a0=1394530 a1=1394490 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13541 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.077:6599): proctitle="ps"
type=PATH msg=audit(1523930506.077:6599): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.077:6599): cwd="/root"
type=SYSCALL msg=audit(1523930506.077:6599): arch=c000003e syscall=2 success=yes exit=3 a0=7f0b8c1464b0 a1=80000 a2=7f0b8c177150 a3=7f0b8c1464b0 items=1 ppid=10524 pid=13541 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.079:6600): proctitle=2F7573722F62696E2F707974686F6E002F62696E2F79756D002D7900696E7374616C6C00676C696263
type=PATH msg=audit(1523930506.079:6600): item=0 name="/lib64/ld-2.17.so" inode=2235 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.079:6600): cwd="/root"
type=SYSCALL msg=audit(1523930506.079:6600): arch=c000003e syscall=197 success=no exit=-61 a0=31a7880 a1=7fd5f9ae2114 a2=7fd60099e1a5 a3=7fd5f9f5d652 items=1 ppid=12459 pid=12462 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="yum" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=CONFIG_CHANGE msg=audit(1523930506.079:6601): auid=0 ses=2 op=updated_rules path="/lib64/ld-2.17.so" key=(null) list=4 res=1
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.079:6602): proctitle=2F7573722F62696E2F707974686F6E002F62696E2F79756D002D7900696E7374616C6C00676C696263
type=PATH msg=audit(1523930506.079:6602): item=4 name="/lib64/ld-2.17.so" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=CREATE
type=PATH msg=audit(1523930506.079:6602): item=3 name="/lib64/ld-2.17.so" inode=2235 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=DELETE
type=PATH msg=audit(1523930506.079:6602): item=2 name="/lib64/ld-2.17.so;5ad5558a" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=DELETE
type=PATH msg=audit(1523930506.079:6602): item=1 name="/lib64/" inode=79 dev=fd:00 mode=040555 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=PARENT
type=PATH msg=audit(1523930506.079:6602): item=0 name="/lib64/" inode=79 dev=fd:00 mode=040555 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=PARENT
type=CWD msg=audit(1523930506.079:6602): cwd="/root"
type=SYSCALL msg=audit(1523930506.079:6602): arch=c000003e syscall=82 success=yes exit=0 a0=3f1d0f0 a1=31a7880 a2=7fd60099e1a5 a3=7fd5f9f5d652 items=5 ppid=12459 pid=12462 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="yum" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.081:6603): proctitle="ps"
type=PATH msg=audit(1523930506.081:6603): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.081:6603): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.081:6603): cwd="/root"
type=EXECVE msg=audit(1523930506.081:6603): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.081:6603): arch=c000003e syscall=59 success=yes exit=0 a0=1394550 a1=13944b0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13542 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.082:6604): proctitle="ps"
type=PATH msg=audit(1523930506.082:6604): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.082:6604): cwd="/root"
type=SYSCALL msg=audit(1523930506.082:6604): arch=c000003e syscall=2 success=yes exit=3 a0=7f9cd9cc14b0 a1=80000 a2=7f9cd9cf2150 a3=7f9cd9cc14b0 items=1 ppid=10524 pid=13542 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.083:6605): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13542 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.084:6606): proctitle="ps"
type=PATH msg=audit(1523930506.084:6606): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.084:6606): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.084:6606): cwd="/root"
type=EXECVE msg=audit(1523930506.084:6606): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.084:6606): arch=c000003e syscall=59 success=yes exit=0 a0=1394570 a1=13944d0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13543 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.085:6607): proctitle="ps"
type=PATH msg=audit(1523930506.085:6607): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.085:6607): cwd="/root"
type=SYSCALL msg=audit(1523930506.085:6607): arch=c000003e syscall=2 success=yes exit=3 a0=7f43e65b84b0 a1=80000 a2=7f43e65e9150 a3=7f43e65b84b0 items=1 ppid=10524 pid=13543 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.086:6608): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13543 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.087:6609): proctitle="ps"
type=PATH msg=audit(1523930506.087:6609): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.087:6609): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.087:6609): cwd="/root"
type=EXECVE msg=audit(1523930506.087:6609): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.087:6609): arch=c000003e syscall=59 success=yes exit=0 a0=13945d0 a1=13944f0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13544 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.087:6610): proctitle="ps"
type=PATH msg=audit(1523930506.087:6610): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.087:6610): cwd="/root"
type=SYSCALL msg=audit(1523930506.087:6610): arch=c000003e syscall=2 success=yes exit=3 a0=7f06472154b0 a1=80000 a2=7f0647246150 a3=7f06472154b0 items=1 ppid=10524 pid=13544 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.088:6611): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13544 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.090:6612): proctitle="ps"
type=PATH msg=audit(1523930506.090:6612): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.090:6612): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.090:6612): cwd="/root"
type=EXECVE msg=audit(1523930506.090:6612): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.090:6612): arch=c000003e syscall=59 success=yes exit=0 a0=13945f0 a1=1394510 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13545 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.090:6613): proctitle="ps"
type=PATH msg=audit(1523930506.090:6613): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.090:6613): cwd="/root"
type=SYSCALL msg=audit(1523930506.090:6613): arch=c000003e syscall=2 success=yes exit=3 a0=7ff6da06d4b0 a1=80000 a2=7ff6da09e150 a3=7ff6da06d4b0 items=1 ppid=10524 pid=13545 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.091:6614): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13545 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.092:6615): proctitle="ps"
type=PATH msg=audit(1523930506.092:6615): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.092:6615): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.092:6615): cwd="/root"
type=EXECVE msg=audit(1523930506.092:6615): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.092:6615): arch=c000003e syscall=59 success=yes exit=0 a0=1394610 a1=1394530 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13546 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.092:6616): proctitle="ps"
type=PATH msg=audit(1523930506.092:6616): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.092:6616): cwd="/root"
type=SYSCALL msg=audit(1523930506.092:6616): arch=c000003e syscall=2 success=yes exit=3 a0=7fa9dd6054b0 a1=80000 a2=7fa9dd636150 a3=7fa9dd6054b0 items=1 ppid=10524 pid=13546 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.093:6617): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13546 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.094:6618): proctitle="ps"
type=PATH msg=audit(1523930506.094:6618): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.094:6618): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.094:6618): cwd="/root"
type=EXECVE msg=audit(1523930506.094:6618): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.094:6618): arch=c000003e syscall=59 success=yes exit=0 a0=1394630 a1=1394550 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13547 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.094:6619): proctitle="ps"
type=PATH msg=audit(1523930506.094:6619): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.094:6619): cwd="/root"
type=SYSCALL msg=audit(1523930506.094:6619): arch=c000003e syscall=2 success=yes exit=3 a0=7fa5d199e4b0 a1=80000 a2=7fa5d19cf150 a3=7fa5d199e4b0 items=1 ppid=10524 pid=13547 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.095:6620): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13547 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.095:6621): proctitle="ps"
type=PATH msg=audit(1523930506.095:6621): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.095:6621): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.095:6621): cwd="/root"
type=EXECVE msg=audit(1523930506.095:6621): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.095:6621): arch=c000003e syscall=59 success=yes exit=0 a0=1394650 a1=1394570 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13548 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.096:6622): proctitle="ps"
type=PATH msg=audit(1523930506.096:6622): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.096:6622): cwd="/root"
type=SYSCALL msg=audit(1523930506.096:6622): arch=c000003e syscall=2 success=yes exit=3 a0=7f10053664b0 a1=80000 a2=7f1005397150 a3=7f10053664b0 items=1 ppid=10524 pid=13548 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.096:6623): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13548 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.097:6624): proctitle="ps"
type=PATH msg=audit(1523930506.097:6624): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.097:6624): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.097:6624): cwd="/root"
type=EXECVE msg=audit(1523930506.097:6624): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.097:6624): arch=c000003e syscall=59 success=yes exit=0 a0=1394670 a1=13945d0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13549 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.097:6625): proctitle="ps"
type=PATH msg=audit(1523930506.097:6625): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.097:6625): cwd="/root"
type=SYSCALL msg=audit(1523930506.097:6625): arch=c000003e syscall=2 success=yes exit=3 a0=7f8a3649e4b0 a1=80000 a2=7f8a364cf150 a3=7f8a3649e4b0 items=1 ppid=10524 pid=13549 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.098:6626): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13549 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.099:6627): proctitle="ps"
type=PATH msg=audit(1523930506.099:6627): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.099:6627): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.099:6627): cwd="/root"
type=EXECVE msg=audit(1523930506.099:6627): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.099:6627): arch=c000003e syscall=59 success=yes exit=0 a0=1394690 a1=13945f0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13550 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.100:6628): proctitle="ps"
type=PATH msg=audit(1523930506.100:6628): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.100:6628): cwd="/root"
type=SYSCALL msg=audit(1523930506.100:6628): arch=c000003e syscall=2 success=yes exit=3 a0=7f4d5c12e4b0 a1=80000 a2=7f4d5c15f150 a3=7f4d5c12e4b0 items=1 ppid=10524 pid=13550 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.100:6629): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13550 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.101:6630): proctitle="ps"
type=PATH msg=audit(1523930506.101:6630): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.101:6630): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.101:6630): cwd="/root"
type=EXECVE msg=audit(1523930506.101:6630): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.101:6630): arch=c000003e syscall=59 success=yes exit=0 a0=13946b0 a1=1394610 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13551 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.101:6631): proctitle="ps"
type=PATH msg=audit(1523930506.101:6631): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.101:6631): cwd="/root"
type=SYSCALL msg=audit(1523930506.101:6631): arch=c000003e syscall=2 success=yes exit=3 a0=7ff5309e84b0 a1=80000 a2=7ff530a19150 a3=7ff5309e84b0 items=1 ppid=10524 pid=13551 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.102:6632): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13551 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.103:6633): proctitle="ps"
type=PATH msg=audit(1523930506.103:6633): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.103:6633): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.103:6633): cwd="/root"
type=EXECVE msg=audit(1523930506.103:6633): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.103:6633): arch=c000003e syscall=59 success=yes exit=0 a0=13946d0 a1=1394630 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13552 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.103:6634): proctitle="ps"
type=PATH msg=audit(1523930506.103:6634): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.103:6634): cwd="/root"
type=SYSCALL msg=audit(1523930506.103:6634): arch=c000003e syscall=2 success=yes exit=3 a0=7f6c799bd4b0 a1=80000 a2=7f6c799ee150 a3=7f6c799bd4b0 items=1 ppid=10524 pid=13552 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.104:6635): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13552 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.105:6636): proctitle="ps"
type=PATH msg=audit(1523930506.105:6636): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.105:6636): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.105:6636): cwd="/root"
type=EXECVE msg=audit(1523930506.105:6636): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.105:6636): arch=c000003e syscall=59 success=yes exit=0 a0=13946f0 a1=1394650 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13553 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.105:6637): proctitle="ps"
type=PATH msg=audit(1523930506.105:6637): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.105:6637): cwd="/root"
type=SYSCALL msg=audit(1523930506.105:6637): arch=c000003e syscall=2 success=yes exit=3 a0=7f2a0dceb4b0 a1=80000 a2=7f2a0dd1c150 a3=7f2a0dceb4b0 items=1 ppid=10524 pid=13553 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.106:6638): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13553 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.108:6639): proctitle="ps"
type=PATH msg=audit(1523930506.108:6639): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.108:6639): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.108:6639): cwd="/root"
type=EXECVE msg=audit(1523930506.108:6639): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.108:6639): arch=c000003e syscall=59 success=yes exit=0 a0=1394710 a1=1394670 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13554 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.109:6640): proctitle="ps"
type=PATH msg=audit(1523930506.109:6640): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.109:6640): cwd="/root"
type=SYSCALL msg=audit(1523930506.109:6640): arch=c000003e syscall=2 success=yes exit=3 a0=7f08f1b5c4b0 a1=80000 a2=7f08f1b8d150 a3=7f08f1b5c4b0 items=1 ppid=10524 pid=13554 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.110:6641): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13554 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.110:6642): proctitle="ps"
type=PATH msg=audit(1523930506.110:6642): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.110:6642): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.110:6642): cwd="/root"
type=EXECVE msg=audit(1523930506.110:6642): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.110:6642): arch=c000003e syscall=59 success=yes exit=0 a0=1394730 a1=1394690 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13555 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.111:6643): proctitle="ps"
type=PATH msg=audit(1523930506.111:6643): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.111:6643): cwd="/root"
type=SYSCALL msg=audit(1523930506.111:6643): arch=c000003e syscall=2 success=yes exit=3 a0=7f37c58844b0 a1=80000 a2=7f37c58b5150 a3=7f37c58844b0 items=1 ppid=10524 pid=13555 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.111:6644): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13555 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.112:6645): proctitle="ps"
type=PATH msg=audit(1523930506.112:6645): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.112:6645): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.112:6645): cwd="/root"
type=EXECVE msg=audit(1523930506.112:6645): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.112:6645): arch=c000003e syscall=59 success=yes exit=0 a0=1394750 a1=13946b0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13556 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.113:6646): proctitle="ps"
type=PATH msg=audit(1523930506.113:6646): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.113:6646): cwd="/root"
type=SYSCALL msg=audit(1523930506.113:6646): arch=c000003e syscall=2 success=yes exit=3 a0=7f1e7c8d84b0 a1=80000 a2=7f1e7c909150 a3=7f1e7c8d84b0 items=1 ppid=10524 pid=13556 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.114:6647): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13556 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.115:6648): proctitle="ps"
type=PATH msg=audit(1523930506.115:6648): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.115:6648): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.115:6648): cwd="/root"
type=EXECVE msg=audit(1523930506.115:6648): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.115:6648): arch=c000003e syscall=59 success=yes exit=0 a0=1394770 a1=13946d0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13557 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.115:6649): proctitle="ps"
type=PATH msg=audit(1523930506.115:6649): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.115:6649): cwd="/root"
type=SYSCALL msg=audit(1523930506.115:6649): arch=c000003e syscall=2 success=yes exit=3 a0=7f03c39844b0 a1=80000 a2=7f03c39b5150 a3=7f03c39844b0 items=1 ppid=10524 pid=13557 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.116:6650): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13557 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.117:6651): proctitle="ps"
type=PATH msg=audit(1523930506.117:6651): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.117:6651): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.117:6651): cwd="/root"
type=EXECVE msg=audit(1523930506.117:6651): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.117:6651): arch=c000003e syscall=59 success=yes exit=0 a0=1394790 a1=13946f0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13558 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.118:6652): proctitle="ps"
type=PATH msg=audit(1523930506.118:6652): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.118:6652): cwd="/root"
type=SYSCALL msg=audit(1523930506.118:6652): arch=c000003e syscall=2 success=yes exit=3 a0=7f391a9e94b0 a1=80000 a2=7f391aa1a150 a3=7f391a9e94b0 items=1 ppid=10524 pid=13558 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.118:6653): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13558 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.119:6654): proctitle="ps"
type=PATH msg=audit(1523930506.119:6654): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.119:6654): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.119:6654): cwd="/root"
type=EXECVE msg=audit(1523930506.119:6654): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.119:6654): arch=c000003e syscall=59 success=yes exit=0 a0=13947b0 a1=1394710 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13559 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.120:6655): proctitle="ps"
type=PATH msg=audit(1523930506.120:6655): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.120:6655): cwd="/root"
type=SYSCALL msg=audit(1523930506.120:6655): arch=c000003e syscall=2 success=yes exit=3 a0=7ff37a8fe4b0 a1=80000 a2=7ff37a92f150 a3=7ff37a8fe4b0 items=1 ppid=10524 pid=13559 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.120:6656): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13559 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.121:6657): proctitle="ps"
type=PATH msg=audit(1523930506.121:6657): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.121:6657): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.121:6657): cwd="/root"
type=EXECVE msg=audit(1523930506.121:6657): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.121:6657): arch=c000003e syscall=59 success=yes exit=0 a0=13947d0 a1=1394730 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13560 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.123:6658): proctitle="ps"
type=PATH msg=audit(1523930506.123:6658): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.123:6658): cwd="/root"
type=SYSCALL msg=audit(1523930506.123:6658): arch=c000003e syscall=2 success=yes exit=3 a0=7facd89534b0 a1=80000 a2=7facd8984150 a3=7facd89534b0 items=1 ppid=10524 pid=13560 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.124:6659): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13560 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.124:6660): proctitle="ps"
type=PATH msg=audit(1523930506.124:6660): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.124:6660): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.124:6660): cwd="/root"
type=EXECVE msg=audit(1523930506.124:6660): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.124:6660): arch=c000003e syscall=59 success=yes exit=0 a0=13947f0 a1=1394750 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13561 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.125:6661): proctitle="ps"
type=PATH msg=audit(1523930506.125:6661): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.125:6661): cwd="/root"
type=SYSCALL msg=audit(1523930506.125:6661): arch=c000003e syscall=2 success=yes exit=3 a0=7f781935f4b0 a1=80000 a2=7f7819390150 a3=7f781935f4b0 items=1 ppid=10524 pid=13561 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.126:6662): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13561 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.126:6663): proctitle="ps"
type=PATH msg=audit(1523930506.126:6663): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.126:6663): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.126:6663): cwd="/root"
type=EXECVE msg=audit(1523930506.126:6663): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.126:6663): arch=c000003e syscall=59 success=yes exit=0 a0=1394810 a1=1394770 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13562 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.127:6664): proctitle="ps"
type=PATH msg=audit(1523930506.127:6664): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.127:6664): cwd="/root"
type=SYSCALL msg=audit(1523930506.127:6664): arch=c000003e syscall=2 success=yes exit=3 a0=7f8dbe92c4b0 a1=80000 a2=7f8dbe95d150 a3=7f8dbe92c4b0 items=1 ppid=10524 pid=13562 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.128:6665): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13562 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.128:6666): proctitle="ps"
type=PATH msg=audit(1523930506.128:6666): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.128:6666): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.128:6666): cwd="/root"
type=EXECVE msg=audit(1523930506.128:6666): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.128:6666): arch=c000003e syscall=59 success=yes exit=0 a0=1394830 a1=1394790 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13563 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.129:6667): proctitle="ps"
type=PATH msg=audit(1523930506.129:6667): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.129:6667): cwd="/root"
type=SYSCALL msg=audit(1523930506.129:6667): arch=c000003e syscall=2 success=yes exit=3 a0=7fbf3c77f4b0 a1=80000 a2=7fbf3c7b0150 a3=7fbf3c77f4b0 items=1 ppid=10524 pid=13563 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.129:6668): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13563 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.130:6669): proctitle="ps"
type=PATH msg=audit(1523930506.130:6669): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.130:6669): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.130:6669): cwd="/root"
type=EXECVE msg=audit(1523930506.130:6669): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.130:6669): arch=c000003e syscall=59 success=yes exit=0 a0=1394850 a1=13947b0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13564 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.130:6670): proctitle="ps"
type=PATH msg=audit(1523930506.130:6670): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.130:6670): cwd="/root"
type=SYSCALL msg=audit(1523930506.130:6670): arch=c000003e syscall=2 success=yes exit=3 a0=7f994b3394b0 a1=80000 a2=7f994b36a150 a3=7f994b3394b0 items=1 ppid=10524 pid=13564 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.131:6671): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13564 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.132:6672): proctitle="ps"
type=PATH msg=audit(1523930506.132:6672): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.132:6672): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.132:6672): cwd="/root"
type=EXECVE msg=audit(1523930506.132:6672): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.132:6672): arch=c000003e syscall=59 success=yes exit=0 a0=1394870 a1=13947d0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13565 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.133:6673): proctitle="ps"
type=PATH msg=audit(1523930506.133:6673): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.133:6673): cwd="/root"
type=SYSCALL msg=audit(1523930506.133:6673): arch=c000003e syscall=2 success=yes exit=3 a0=7f78b0a844b0 a1=80000 a2=7f78b0ab5150 a3=7f78b0a844b0 items=1 ppid=10524 pid=13565 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.134:6674): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13565 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.134:6675): proctitle="ps"
type=PATH msg=audit(1523930506.134:6675): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.134:6675): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.134:6675): cwd="/root"
type=EXECVE msg=audit(1523930506.134:6675): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.134:6675): arch=c000003e syscall=59 success=yes exit=0 a0=1394890 a1=13947f0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13566 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.134:6676): proctitle="ps"
type=PATH msg=audit(1523930506.134:6676): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.134:6676): cwd="/root"
type=SYSCALL msg=audit(1523930506.134:6676): arch=c000003e syscall=2 success=yes exit=3 a0=7f524505b4b0 a1=80000 a2=7f524508c150 a3=7f524505b4b0 items=1 ppid=10524 pid=13566 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.135:6677): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13566 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.136:6678): proctitle="ps"
type=PATH msg=audit(1523930506.136:6678): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.136:6678): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.136:6678): cwd="/root"
type=EXECVE msg=audit(1523930506.136:6678): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.136:6678): arch=c000003e syscall=59 success=yes exit=0 a0=13948b0 a1=1394810 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13567 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.136:6679): proctitle="ps"
type=PATH msg=audit(1523930506.136:6679): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.136:6679): cwd="/root"
type=SYSCALL msg=audit(1523930506.136:6679): arch=c000003e syscall=2 success=yes exit=3 a0=7fb9867504b0 a1=80000 a2=7fb986781150 a3=7fb9867504b0 items=1 ppid=10524 pid=13567 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.137:6680): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13567 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.138:6681): proctitle="ps"
type=PATH msg=audit(1523930506.138:6681): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.138:6681): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.138:6681): cwd="/root"
type=EXECVE msg=audit(1523930506.138:6681): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.138:6681): arch=c000003e syscall=59 success=yes exit=0 a0=13948d0 a1=1394830 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13568 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.138:6682): proctitle="ps"
type=PATH msg=audit(1523930506.138:6682): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.138:6682): cwd="/root"
type=SYSCALL msg=audit(1523930506.138:6682): arch=c000003e syscall=2 success=yes exit=3 a0=7f1f4e3444b0 a1=80000 a2=7f1f4e375150 a3=7f1f4e3444b0 items=1 ppid=10524 pid=13568 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.139:6683): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13568 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.141:6684): proctitle="ps"
type=PATH msg=audit(1523930506.141:6684): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.141:6684): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.141:6684): cwd="/root"
type=EXECVE msg=audit(1523930506.141:6684): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.141:6684): arch=c000003e syscall=59 success=yes exit=0 a0=13948f0 a1=1394850 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13569 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.142:6685): proctitle="ps"
type=PATH msg=audit(1523930506.142:6685): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.142:6685): cwd="/root"
type=SYSCALL msg=audit(1523930506.142:6685): arch=c000003e syscall=2 success=yes exit=3 a0=7f5fcb3f44b0 a1=80000 a2=7f5fcb425150 a3=7f5fcb3f44b0 items=1 ppid=10524 pid=13569 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.143:6686): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13569 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.143:6687): proctitle="ps"
type=PATH msg=audit(1523930506.143:6687): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.143:6687): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.143:6687): cwd="/root"
type=EXECVE msg=audit(1523930506.143:6687): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.143:6687): arch=c000003e syscall=59 success=yes exit=0 a0=1394910 a1=1394870 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13570 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.144:6688): proctitle="ps"
type=PATH msg=audit(1523930506.144:6688): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.144:6688): cwd="/root"
type=SYSCALL msg=audit(1523930506.144:6688): arch=c000003e syscall=2 success=yes exit=3 a0=7f383fba84b0 a1=80000 a2=7f383fbd9150 a3=7f383fba84b0 items=1 ppid=10524 pid=13570 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.144:6689): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13570 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.145:6690): proctitle="ps"
type=PATH msg=audit(1523930506.145:6690): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.145:6690): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.145:6690): cwd="/root"
type=EXECVE msg=audit(1523930506.145:6690): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.145:6690): arch=c000003e syscall=59 success=yes exit=0 a0=1394930 a1=1394890 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13571 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.146:6691): proctitle="ps"
type=PATH msg=audit(1523930506.146:6691): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.146:6691): cwd="/root"
type=SYSCALL msg=audit(1523930506.146:6691): arch=c000003e syscall=2 success=yes exit=3 a0=7f696280c4b0 a1=80000 a2=7f696283d150 a3=7f696280c4b0 items=1 ppid=10524 pid=13571 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.146:6692): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13571 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.147:6693): proctitle="ps"
type=PATH msg=audit(1523930506.147:6693): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.147:6693): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.147:6693): cwd="/root"
type=EXECVE msg=audit(1523930506.147:6693): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.147:6693): arch=c000003e syscall=59 success=yes exit=0 a0=1394950 a1=13948b0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13572 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.147:6694): proctitle="ps"
type=PATH msg=audit(1523930506.147:6694): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.147:6694): cwd="/root"
type=SYSCALL msg=audit(1523930506.147:6694): arch=c000003e syscall=2 success=yes exit=3 a0=7f66df4074b0 a1=80000 a2=7f66df438150 a3=7f66df4074b0 items=1 ppid=10524 pid=13572 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.148:6695): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13572 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.149:6696): proctitle="ps"
type=PATH msg=audit(1523930506.149:6696): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.149:6696): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.149:6696): cwd="/root"
type=EXECVE msg=audit(1523930506.149:6696): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.149:6696): arch=c000003e syscall=59 success=yes exit=0 a0=1394970 a1=13948d0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13573 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.149:6697): proctitle="ps"
type=PATH msg=audit(1523930506.149:6697): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.149:6697): cwd="/root"
type=SYSCALL msg=audit(1523930506.149:6697): arch=c000003e syscall=2 success=yes exit=3 a0=7f46769fc4b0 a1=80000 a2=7f4676a2d150 a3=7f46769fc4b0 items=1 ppid=10524 pid=13573 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.150:6698): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13573 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.150:6699): proctitle="ps"
type=PATH msg=audit(1523930506.150:6699): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.150:6699): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.150:6699): cwd="/root"
type=EXECVE msg=audit(1523930506.150:6699): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.150:6699): arch=c000003e syscall=59 success=yes exit=0 a0=1394990 a1=13948f0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13574 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.151:6700): proctitle="ps"
type=PATH msg=audit(1523930506.151:6700): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.151:6700): cwd="/root"
type=SYSCALL msg=audit(1523930506.151:6700): arch=c000003e syscall=2 success=yes exit=3 a0=7f65caa0b4b0 a1=80000 a2=7f65caa3c150 a3=7f65caa0b4b0 items=1 ppid=10524 pid=13574 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.152:6701): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13574 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.153:6702): proctitle="ps"
type=PATH msg=audit(1523930506.153:6702): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.153:6702): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.153:6702): cwd="/root"
type=EXECVE msg=audit(1523930506.153:6702): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.153:6702): arch=c000003e syscall=59 success=yes exit=0 a0=13949b0 a1=1394910 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13575 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.153:6703): proctitle="ps"
type=PATH msg=audit(1523930506.153:6703): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.153:6703): cwd="/root"
type=SYSCALL msg=audit(1523930506.153:6703): arch=c000003e syscall=2 success=yes exit=3 a0=7f792f76b4b0 a1=80000 a2=7f792f79c150 a3=7f792f76b4b0 items=1 ppid=10524 pid=13575 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.154:6704): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13575 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.155:6705): proctitle="ps"
type=PATH msg=audit(1523930506.155:6705): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.155:6705): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.155:6705): cwd="/root"
type=EXECVE msg=audit(1523930506.155:6705): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.155:6705): arch=c000003e syscall=59 success=yes exit=0 a0=13949d0 a1=1394930 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13576 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.155:6706): proctitle="ps"
type=PATH msg=audit(1523930506.155:6706): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.155:6706): cwd="/root"
type=SYSCALL msg=audit(1523930506.155:6706): arch=c000003e syscall=2 success=yes exit=3 a0=7ff0bec184b0 a1=80000 a2=7ff0bec49150 a3=7ff0bec184b0 items=1 ppid=10524 pid=13576 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.156:6707): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13576 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.157:6708): proctitle="ps"
type=PATH msg=audit(1523930506.157:6708): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.157:6708): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.157:6708): cwd="/root"
type=EXECVE msg=audit(1523930506.157:6708): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.157:6708): arch=c000003e syscall=59 success=yes exit=0 a0=13949f0 a1=1394950 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13577 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.157:6709): proctitle="ps"
type=PATH msg=audit(1523930506.157:6709): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.157:6709): cwd="/root"
type=SYSCALL msg=audit(1523930506.157:6709): arch=c000003e syscall=2 success=yes exit=3 a0=7f77624d24b0 a1=80000 a2=7f7762503150 a3=7f77624d24b0 items=1 ppid=10524 pid=13577 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.158:6710): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13577 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.158:6711): proctitle="ps"
type=PATH msg=audit(1523930506.158:6711): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.158:6711): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.158:6711): cwd="/root"
type=EXECVE msg=audit(1523930506.158:6711): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.158:6711): arch=c000003e syscall=59 success=yes exit=0 a0=1394a10 a1=1394970 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13578 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.159:6712): proctitle="ps"
type=PATH msg=audit(1523930506.159:6712): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.159:6712): cwd="/root"
type=SYSCALL msg=audit(1523930506.159:6712): arch=c000003e syscall=2 success=yes exit=3 a0=7fe4b39754b0 a1=80000 a2=7fe4b39a6150 a3=7fe4b39754b0 items=1 ppid=10524 pid=13578 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.159:6713): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13578 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.160:6714): proctitle="ps"
type=PATH msg=audit(1523930506.160:6714): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.160:6714): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.160:6714): cwd="/root"
type=EXECVE msg=audit(1523930506.160:6714): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.160:6714): arch=c000003e syscall=59 success=yes exit=0 a0=1394a30 a1=1394990 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13579 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.161:6715): proctitle="ps"
type=PATH msg=audit(1523930506.161:6715): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.161:6715): cwd="/root"
type=SYSCALL msg=audit(1523930506.161:6715): arch=c000003e syscall=2 success=yes exit=3 a0=7f713b6a24b0 a1=80000 a2=7f713b6d3150 a3=7f713b6a24b0 items=1 ppid=10524 pid=13579 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.162:6716): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13579 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.162:6717): proctitle="ps"
type=PATH msg=audit(1523930506.162:6717): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.162:6717): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.162:6717): cwd="/root"
type=EXECVE msg=audit(1523930506.162:6717): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.162:6717): arch=c000003e syscall=59 success=yes exit=0 a0=1394a50 a1=13949b0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13580 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.163:6718): proctitle="ps"
type=PATH msg=audit(1523930506.163:6718): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.163:6718): cwd="/root"
type=SYSCALL msg=audit(1523930506.163:6718): arch=c000003e syscall=2 success=yes exit=3 a0=7f514421f4b0 a1=80000 a2=7f5144250150 a3=7f514421f4b0 items=1 ppid=10524 pid=13580 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.163:6719): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13580 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.164:6720): proctitle="ps"
type=PATH msg=audit(1523930506.164:6720): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.164:6720): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.164:6720): cwd="/root"
type=EXECVE msg=audit(1523930506.164:6720): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.164:6720): arch=c000003e syscall=59 success=yes exit=0 a0=1394a70 a1=13949d0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13581 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.165:6721): proctitle="ps"
type=PATH msg=audit(1523930506.165:6721): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.165:6721): cwd="/root"
type=SYSCALL msg=audit(1523930506.165:6721): arch=c000003e syscall=2 success=yes exit=3 a0=7f77bfd334b0 a1=80000 a2=7f77bfd64150 a3=7f77bfd334b0 items=1 ppid=10524 pid=13581 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.165:6722): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13581 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.166:6723): proctitle="ps"
type=PATH msg=audit(1523930506.166:6723): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.166:6723): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.166:6723): cwd="/root"
type=EXECVE msg=audit(1523930506.166:6723): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.166:6723): arch=c000003e syscall=59 success=yes exit=0 a0=1394a90 a1=13949f0 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13582 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.166:6724): proctitle="ps"
type=PATH msg=audit(1523930506.166:6724): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.166:6724): cwd="/root"
type=SYSCALL msg=audit(1523930506.166:6724): arch=c000003e syscall=2 success=yes exit=3 a0=7f08ce0534b0 a1=80000 a2=7f08ce084150 a3=7f08ce0534b0 items=1 ppid=10524 pid=13582 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.167:6725): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13582 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.168:6726): proctitle="ps"
type=PATH msg=audit(1523930506.168:6726): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.168:6726): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.168:6726): cwd="/root"
type=EXECVE msg=audit(1523930506.168:6726): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.168:6726): arch=c000003e syscall=59 success=yes exit=0 a0=1394ab0 a1=1394a10 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13583 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.169:6727): proctitle="ps"
type=PATH msg=audit(1523930506.169:6727): item=0 name="/lib64/libc.so.6" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.169:6727): cwd="/root"
type=SYSCALL msg=audit(1523930506.169:6727): arch=c000003e syscall=2 success=yes exit=3 a0=7fb5cbb784b0 a1=80000 a2=7fb5cbba9150 a3=7fb5cbb784b0 items=1 ppid=10524 pid=13583 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.169:6728): proctitle=2F7573722F62696E2F707974686F6E002F62696E2F79756D002D7900696E7374616C6C00676C696263
type=PATH msg=audit(1523930506.169:6728): item=0 name="/lib64/libc-2.17.so" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.169:6728): cwd="/root"
type=SYSCALL msg=audit(1523930506.169:6728): arch=c000003e syscall=197 success=no exit=-61 a0=31a7880 a1=7fd5f9ae2114 a2=7fd60099e1a5 a3=7fd5f9f5d652 items=1 ppid=12459 pid=12462 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="yum" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=CONFIG_CHANGE msg=audit(1523930506.169:6729): auid=0 ses=2 op=updated_rules path="/lib64/libc-2.17.so" key=(null) list=4 res=1
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.169:6730): proctitle=2F7573722F62696E2F707974686F6E002F62696E2F79756D002D7900696E7374616C6C00676C696263
type=PATH msg=audit(1523930506.169:6730): item=4 name="/lib64/libc-2.17.so" inode=2236 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=CREATE
type=PATH msg=audit(1523930506.169:6730): item=3 name="/lib64/libc-2.17.so" inode=2780 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=DELETE
type=PATH msg=audit(1523930506.169:6730): item=2 name="/lib64/libc-2.17.so;5ad5558a" inode=2236 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=DELETE
type=PATH msg=audit(1523930506.169:6730): item=1 name="/lib64/" inode=79 dev=fd:00 mode=040555 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=PARENT
type=PATH msg=audit(1523930506.169:6730): item=0 name="/lib64/" inode=79 dev=fd:00 mode=040555 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=PARENT
type=CWD msg=audit(1523930506.169:6730): cwd="/root"
type=SYSCALL msg=audit(1523930506.169:6730): arch=c000003e syscall=82 success=yes exit=0 a0=3a06fc0 a1=31a7880 a2=7fd60099e1a5 a3=7fd5f9f5d652 items=5 ppid=12459 pid=12462 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="yum" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=ANOM_ABEND msg=audit(1523930506.170:6731): auid=0 uid=0 gid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13583 comm="ps" reason="memory violation" sig=11
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.171:6732): proctitle="ps"
type=PATH msg=audit(1523930506.171:6732): item=1 name="/lib64/ld-linux-x86-64.so.2" inode=2225 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=PATH msg=audit(1523930506.171:6732): item=0 name="/usr/bin/ps" inode=50421946 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.171:6732): cwd="/root"
type=EXECVE msg=audit(1523930506.171:6732): argc=1 a0="ps"
type=SYSCALL msg=audit(1523930506.171:6732): arch=c000003e syscall=59 success=yes exit=0 a0=1394ad0 a1=1394a30 a2=1379540 a3=7ffd7d31bd60 items=2 ppid=10524 pid=13584 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----
time->Mon Apr 16 22:01:46 2018
type=PROCTITLE msg=audit(1523930506.171:6733): proctitle="ps"
type=PATH msg=audit(1523930506.171:6733): item=0 name="/lib64/libc.so.6" inode=2236 dev=fd:00 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 objtype=NORMAL
type=CWD msg=audit(1523930506.171:6733): cwd="/root"
type=SYSCALL msg=audit(1523930506.171:6733): arch=c000003e syscall=2 success=yes exit=3 a0=7fe5380284b0 a1=80000 a2=7fe538059150 a3=7fe5380284b0 items=1 ppid=10524 pid=13584 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="ps" exe="/usr/bin/ps" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
----

If you look at these logs, there are no ps crashes until after libc is upgraded. Once ld-2.17.so is replaced, ps crashes until the corresponding libc-2.17.so is replaced.

The crashes start when ld-2.17.so is replaced.

1. ld-2.17.so" inode=2225 is deleted and replaced
2. ps execve'd with ld-2.17.so pointing to inode 2225 (which is now deleted)
3. ps crashes a lot

Once libc-2.17.so is updated, there are no more crashes.

1. ps (pid 13583) starts
2. libc is replaced
3. ps (pid 13583) crashes (this is the last ps crash)

Here are some details from one of the core files.

[root@localhost tmp]# gdb ps --core core.ps.1523924605.3100
GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-100.el7_4.1
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/ps...Reading symbols from /usr/lib/debug/usr/bin/ps.debug...done.
done.
[New LWP 3100]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `ps'.
Program terminated with signal 11, Segmentation fault.
#0 0x00007f423f0d0460 in free@plt () from /lib64/libc.so.6
Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.6-13.el7.x86_64 elfutils-libelf-0.168-8.el7.x86_64 elfutils-libs-0.168-8.el7.x86_64 libattr-2.4.46-12.el7.x86_64 libcap-2.22-9.el7.x86_64 libgcc-4.8.5-16.el7.x86_64 libgcrypt-1.5.3-14.el7.x86_64 libgpg-error-1.12-3.el7.x86_64 libselinux-2.5-11.el7.x86_64 pcre-8.32-17.el7.x86_64 xz-libs-5.2.2-1.el7.x86_64 zlib-1.2.7-17.el7.x86_64
(gdb) bt
#0 0x00007f423f0d0460 in free@plt () from /lib64/libc.so.6
#1 0x00007f423f1a77c8 in __get_nprocs () at ../sysdeps/unix/sysv/linux/getsysstats.c:132
#2 0x00007f423f17284c in posix_sysconf (name=84) at ../sysdeps/posix/sysconf.c:629
#3 linux_sysconf (name=84) at ../sysdeps/unix/sysv/linux/sysconf.c:145
#4 __GI___sysconf (name=name@entry=84) at ../sysdeps/unix/sysv/linux/x86_64/sysconf.c:36
#5 0x00007f423f68504e in cpuinfo () at sysinfo.c:1129
#6 0x00007f423f67cc90 in init_libproc () at sysinfo.c:335
#7 0x00007f423f8ae4c3 in call_init (env=0x7ffea086c388, argv=0x7ffea086c378, argc=1, l=<optimized out>) at dl-init.c:82
#8 _dl_init (main_map=0x7f423fac2150, argc=1, argv=0x7ffea086c378, env=0x7ffea086c388) at dl-init.c:131
#9 0x00007f423f8a01aa in _dl_start_user () from /lib64/ld-linux-x86-64.so.2
#10 0x0000000000000001 in ?? ()
#11 0x00007ffea086c716 in ?? ()
#12 0x0000000000000000 in ?? ()
(gdb) info reg
rax 0x7f423f172847 139922503051335
rbx 0x54 84
rcx 0x28 40
rdx 0xfffffffffff46b4b -758965
rsi 0x0 0
rdi 0x0 0
rbp 0x7ffea086c1f0 0x7ffea086c1f0
rsp 0x7ffea086c168 0x7ffea086c168
r8 0x3 3
r9 0x0 0
r10 0x7ffea086bca0 140731591605408
r11 0x7f423f172310 139922503050000
r12 0x7ffea086c388 140731591607176
r13 0x7f423f889150 139922510483792
r14 0x1 1
r15 0x7f423f889148 139922510483784
rip 0x7f423f0d0460 0x7f423f0d0460 <free@plt+96>
eflags 0x10202 [ IF RF ]
cs 0x33 51
ss 0x2b 43
ds 0x0 0
es 0x0 0
fs 0x0 0
gs 0x0 0
(gdb) x/i 0x7f423f0d0460
=> 0x7f423f0d0460 <free@plt+96>: jmpq *0x39cc0a(%rip) # 0x7f423f46d070
Steps To ReproduceRun two scripts on a brand new 7.4.1708.

* Script 1

#!/usr/bin/env bash

set -x

let "i=0"
while [ true ]; do
  sudo yum -y install glibc
  sudo yum -y downgrade glibc glibc-common
  let "i++"
  echo $i
  sleep 1
done

* Script 2

#!/usr/bin/env bash
while [ true ]; do
  ps
done

Monitor /var/log/messages for kernel traps.

[root@localhost ~]# grep -r 'traps' /var/log/ | wc -l
53
TagsNo tags attached.
abrt_hash
URL

Activities

codonell

codonell

2019-07-19 15:17

reporter   ~0034852

Your theory is correct. It is a known issue with every GNU/Linux distribution.

Upstream has an FAQ entry for this:
"How do I install all of the GNU C Library project libraries that I just built?"
https://sourceware.org/glibc/wiki/FAQ#How_do_I_install_all_of_the_GNU_C_Library_project_libraries_that_I_just_built.3F

Any process started between the point at which one file is finished being written to disk and the other files are finished being written to disk is in undefined territory.

This is why it is recommended not to upgrade a machine that is under heavy load.

We have been thinking about ways to handle this including using symlinks to switch glibc, which means the race condition is reduced down to the directory traversal time before the symlink is switched to the new install and is therefore narrower.

This is not going to get fixed in CentOS 7.
TrevorH

TrevorH

2019-07-19 15:18

manager   ~0034853

Closing as per last comment.

Issue History

Date Modified Username Field Change
2018-04-17 03:49 meehanto New Issue
2019-07-19 15:17 codonell Note Added: 0034852
2019-07-19 15:18 TrevorH Status new => closed
2019-07-19 15:18 TrevorH Resolution open => not fixable
2019-07-19 15:18 TrevorH Note Added: 0034853