Skip to content

Instantly share code, notes, and snippets.

@yingziwu
Created May 8, 2019 13:37
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save yingziwu/a95c7347c233ce63ae6fdf869715375b to your computer and use it in GitHub Desktop.
Save yingziwu/a95c7347c233ce63ae6fdf869715375b to your computer and use it in GitHub Desktop.
type=PROCTITLE msg=audit(05/08/2019 15:00:16.886:16792) : proctitle=find . -type f
type=PATH msg=audit(05/08/2019 15:00:16.886:16792) : item=0 name=crls.d inode=94160 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:16.886:16792) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:16.886:16792) : arch=x86_64 syscall=openat success=yes exit=5 a0=0x7 a1=0x55a82647b4b8 a2=O_RDONLY|O_NOCTTY|O_NONBLOCK|O_DIRECTORY|O_NOFOLLOW a3=0x0 items=1 ppid=5448 pid=5486 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=find exe=/usr/bin/find key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:16.886:16791) : proctitle=find . -type f
type=PATH msg=audit(05/08/2019 15:00:16.886:16791) : item=0 name=.gnupg inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:16.886:16791) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:16.886:16791) : arch=x86_64 syscall=openat success=yes exit=5 a0=0x6 a1=0x55a826481c48 a2=O_RDONLY|O_NOCTTY|O_NONBLOCK|O_DIRECTORY|O_NOFOLLOW a3=0x0 items=1 ppid=5448 pid=5486 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=find exe=/usr/bin/find key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:16.886:16793) : proctitle=find . -type f
type=PATH msg=audit(05/08/2019 15:00:16.886:16793) : item=0 name=openpgp-revocs.d inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:16.886:16793) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:16.886:16793) : arch=x86_64 syscall=openat success=yes exit=5 a0=0x7 a1=0x55a826479858 a2=O_RDONLY|O_NOCTTY|O_NONBLOCK|O_DIRECTORY|O_NOFOLLOW a3=0x0 items=1 ppid=5448 pid=5486 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=find exe=/usr/bin/find key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:16.886:16794) : proctitle=find . -type f
type=PATH msg=audit(05/08/2019 15:00:16.886:16794) : item=0 name=private-keys-v1.d inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:16.886:16794) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:16.886:16794) : arch=x86_64 syscall=openat success=yes exit=5 a0=0x7 a1=0x55a82647bff8 a2=O_RDONLY|O_NOCTTY|O_NONBLOCK|O_DIRECTORY|O_NOFOLLOW a3=0x0 items=1 ppid=5448 pid=5486 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=find exe=/usr/bin/find key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.580:16796) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.580:16796) : item=0 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645146 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.580:16796) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.580:16796) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae901bb a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.587:16797) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.587:16797) : item=0 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645147 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.587:16797) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.587:16797) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90202 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.590:16798) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.590:16798) : item=0 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645148 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.590:16798) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.590:16798) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90249 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.597:16799) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.597:16799) : item=0 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645149 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.597:16799) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.597:16799) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90290 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.573:16795) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.573:16795) : item=0 name=./.gnupg/crls.d/DIR.txt inode=645142 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.573:16795) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.573:16795) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae901a3 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.600:16800) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.600:16800) : item=0 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645150 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.600:16800) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.600:16800) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae902d7 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.607:16801) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.607:16801) : item=0 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645151 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.607:16801) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.607:16801) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae9031e a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.610:16802) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.610:16802) : item=0 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645152 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.610:16802) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.610:16802) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90365 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.617:16803) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.617:16803) : item=0 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645153 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.617:16803) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.617:16803) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae903ac a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.620:16804) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.620:16804) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645154 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.620:16804) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.620:16804) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae903f3 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.620:16805) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.620:16805) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645155 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.620:16805) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.620:16805) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae9043b a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.620:16806) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.620:16806) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645156 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.620:16806) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.620:16806) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90483 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.623:16807) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.623:16807) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645157 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.623:16807) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.623:16807) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae904cb a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.623:16808) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.623:16808) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645158 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.623:16808) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.623:16808) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90513 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.623:16809) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.623:16809) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645159 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.623:16809) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.623:16809) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae9055b a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.623:16810) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.623:16810) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645160 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.623:16810) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.623:16810) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae905a3 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.623:16811) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.623:16811) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645161 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.623:16811) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.623:16811) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae905eb a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.623:16812) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.623:16812) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645162 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.623:16812) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.623:16812) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90633 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.623:16813) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.623:16813) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645163 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.623:16813) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.623:16813) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae9067b a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.627:16814) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.627:16814) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645164 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.627:16814) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.627:16814) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae906c3 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.627:16815) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.627:16815) : item=0 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645165 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.627:16815) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.627:16815) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae9070b a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.627:16816) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.627:16816) : item=0 name=./.gnupg/trustdb.gpg inode=617199 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.627:16816) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.627:16816) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90753 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.627:16817) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.627:16817) : item=0 name=./.gnupg/dirmngr.conf inode=645143 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.627:16817) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.627:16817) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90768 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.633:16818) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.633:16818) : item=0 name=./.gnupg/gpg-agent.conf inode=645144 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.633:16818) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.633:16818) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae9077e a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.637:16819) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.637:16819) : item=0 name=./.gnupg/gpg.conf inode=645145 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.637:16819) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.637:16819) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae90796 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.643:16820) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.643:16820) : item=0 name=./.gnupg/pubring.kbx~ inode=645167 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.643:16820) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.643:16820) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae907a8 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.647:16821) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.647:16821) : item=0 name=./.gnupg/random_seed inode=645168 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.647:16821) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.647:16821) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae907be a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.647:16822) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.647:16822) : item=0 name=./.gnupg/sshcontrol inode=645169 dev=00:17 mode=file,640 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.647:16822) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.647:16822) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae907d3 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.650:16823) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.650:16823) : item=0 name=./.gnupg/tofu.db inode=645170 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.650:16823) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.650:16823) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae907e7 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:34.650:16824) : proctitle=file ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/chunky_png/vector_spec.rb ./.gem/ruby/2.4.0/gems/chunky_png-1.3.8/spec/png_sui
type=PATH msg=audit(05/08/2019 15:00:34.650:16824) : item=0 name=./.gnupg/pubring.kbx inode=645616 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:34.650:16824) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:34.650:16824) : arch=x86_64 syscall=openat success=yes exit=3 a0=0xffffff9c a1=0x7ffe3ae907f8 a2=O_RDONLY|O_NONBLOCK a3=0x0 items=1 ppid=5493 pid=5504 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=file exe=/usr/bin/file key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.864:16826) : proctitle=mv ./.gnupg/openpgp-revocs.d/[PRIVACY].rev ./.gnupg/openpgp-revocs.d/28DC983826EDE61DC3C11B16B7B2
type=PATH msg=audit(05/08/2019 15:00:41.864:16826) : item=3 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev.ascii inode=645146 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.864:16826) : item=2 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645146 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.864:16826) : item=1 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.864:16826) : item=0 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.864:16826) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.864:16826) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc0dc4aed7 a2=0xffffff9c a3=0x7ffc0dc4af1e items=4 ppid=5509 pid=10327 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.864:16827) : proctitle=mv ./.gnupg/openpgp-revocs.d/[PRIVACY].rev ./.gnupg/openpgp-revocs.d/3CBD557D660B2FD7EB527333585C
type=PATH msg=audit(05/08/2019 15:00:41.864:16827) : item=3 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev.ascii inode=645147 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.864:16827) : item=2 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645147 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.864:16827) : item=1 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.864:16827) : item=0 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.864:16827) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.864:16827) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffd0bf9ced7 a2=0xffffff9c a3=0x7ffd0bf9cf1e items=4 ppid=5509 pid=10328 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.867:16828) : proctitle=mv ./.gnupg/openpgp-revocs.d/[PRIVACY].rev ./.gnupg/openpgp-revocs.d/82D77592A37321D4425EBBD8A6AC
type=PATH msg=audit(05/08/2019 15:00:41.867:16828) : item=3 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev.ascii inode=645148 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.867:16828) : item=2 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645148 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.867:16828) : item=1 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.867:16828) : item=0 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.867:16828) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.867:16828) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffd26322ed7 a2=0xffffff9c a3=0x7ffd26322f1e items=4 ppid=5509 pid=10329 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.867:16829) : proctitle=mv ./.gnupg/openpgp-revocs.d/[PRIVACY].rev ./.gnupg/openpgp-revocs.d/8D470457D63ACAA5447B3DD5706C
type=PATH msg=audit(05/08/2019 15:00:41.867:16829) : item=3 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev.ascii inode=645149 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.867:16829) : item=2 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645149 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.867:16829) : item=1 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.867:16829) : item=0 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.867:16829) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.867:16829) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7fffd7e08ed7 a2=0xffffff9c a3=0x7fffd7e08f1e items=4 ppid=5509 pid=10330 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.870:16830) : proctitle=mv ./.gnupg/openpgp-revocs.d/[PRIVACY].rev ./.gnupg/openpgp-revocs.d/C04FA1B5201A9566C802487D5A0A
type=PATH msg=audit(05/08/2019 15:00:41.870:16830) : item=3 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev.ascii inode=645150 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.870:16830) : item=2 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645150 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.870:16830) : item=1 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.870:16830) : item=0 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.870:16830) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.870:16830) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7fff2794ded7 a2=0xffffff9c a3=0x7fff2794df1e items=4 ppid=5509 pid=10331 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.870:16831) : proctitle=mv ./.gnupg/openpgp-revocs.d/[PRIVACY].rev ./.gnupg/openpgp-revocs.d/CA262D5535D7CDC09505B31B2B14
type=PATH msg=audit(05/08/2019 15:00:41.870:16831) : item=3 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev.ascii inode=645151 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.870:16831) : item=2 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645151 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.870:16831) : item=1 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.870:16831) : item=0 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.870:16831) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.870:16831) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffcdc91eed7 a2=0xffffff9c a3=0x7ffcdc91ef1e items=4 ppid=5509 pid=10332 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.874:16832) : proctitle=mv ./.gnupg/openpgp-revocs.d/[PRIVACY].rev ./.gnupg/openpgp-revocs.d/CF02EF41333BE05FED67CDD8C1AA
type=PATH msg=audit(05/08/2019 15:00:41.874:16832) : item=3 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev.ascii inode=645152 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16832) : item=2 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645152 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16832) : item=1 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16832) : item=0 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.874:16832) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.874:16832) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffd734e6ed7 a2=0xffffff9c a3=0x7ffd734e6f1e items=4 ppid=5509 pid=10333 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.874:16833) : proctitle=mv ./.gnupg/openpgp-revocs.d/[PRIVACY].rev ./.gnupg/openpgp-revocs.d/CF4E8826DA1A0214868EDB443208
type=PATH msg=audit(05/08/2019 15:00:41.874:16833) : item=3 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev.ascii inode=645153 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16833) : item=2 name=./.gnupg/openpgp-revocs.d/[PRIVACY].rev inode=645153 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16833) : item=1 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16833) : item=0 name=./.gnupg/openpgp-revocs.d/ inode=94161 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.874:16833) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.874:16833) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7fffbaae3ed7 a2=0xffffff9c a3=0x7fffbaae3f1e items=4 ppid=5509 pid=10334 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.874:16834) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/06D2E0A3E2B87B74701C4D14D8
type=PATH msg=audit(05/08/2019 15:00:41.874:16834) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.ascii inode=645154 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16834) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645154 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16834) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.874:16834) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.874:16834) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.874:16834) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc11273ed5 a2=0xffffff9c a3=0x7ffc11273f1d items=4 ppid=5509 pid=10335 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.877:16835) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/0F90E4003C3C30EEC56E033AE7
type=PATH msg=audit(05/08/2019 15:00:41.877:16835) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.ascii inode=645155 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.877:16835) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645155 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.877:16835) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.877:16835) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.877:16835) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.877:16835) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc8a593ed5 a2=0xffffff9c a3=0x7ffc8a593f1d items=4 ppid=5509 pid=10336 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.877:16836) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/1ACACE5A10D18C9E5CFFBC28F3
type=PATH msg=audit(05/08/2019 15:00:41.877:16836) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.ascii inode=645156 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.877:16836) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645156 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.877:16836) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.877:16836) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.877:16836) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.877:16836) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffdae8f1ed5 a2=0xffffff9c a3=0x7ffdae8f1f1d items=4 ppid=5509 pid=10337 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.880:16837) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/430BA7179F921E0C78C277296F
type=PATH msg=audit(05/08/2019 15:00:41.880:16837) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645157 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16837) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645157 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16837) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16837) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.880:16837) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.880:16837) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffed4c14ed6 a2=0xffffff9c a3=0x7ffed4c14f1e items=4 ppid=5509 pid=10338 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.880:16838) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/538EC3893319BB4BEC5B1C8A22
type=PATH msg=audit(05/08/2019 15:00:41.880:16838) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645158 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16838) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645158 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16838) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16838) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.880:16838) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.880:16838) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffd46574ed6 a2=0xffffff9c a3=0x7ffd46574f1e items=4 ppid=5509 pid=10339 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.880:16839) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/5DEFF7749D94634D084F9AAE76
type=PATH msg=audit(05/08/2019 15:00:41.880:16839) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645159 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16839) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645159 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16839) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.880:16839) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.880:16839) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.880:16839) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffd67d1bed6 a2=0xffffff9c a3=0x7ffd67d1bf1e items=4 ppid=5509 pid=10340 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.884:16840) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/62F8D457937AFAC12BE40DED3D
type=PATH msg=audit(05/08/2019 15:00:41.884:16840) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645160 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16840) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645160 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16840) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16840) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.884:16840) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.884:16840) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffe59bc1ed6 a2=0xffffff9c a3=0x7ffe59bc1f1e items=4 ppid=5509 pid=10341 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.884:16841) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/63B30A2E8CE3255CE8BD13FB29
type=PATH msg=audit(05/08/2019 15:00:41.884:16841) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645161 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16841) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645161 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16841) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16841) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.884:16841) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.884:16841) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc45819ed6 a2=0xffffff9c a3=0x7ffc45819f1e items=4 ppid=5509 pid=10342 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.884:16842) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/8136DED081F19179E696FBFDC4
type=PATH msg=audit(05/08/2019 15:00:41.884:16842) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645162 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16842) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645162 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16842) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.884:16842) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.884:16842) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.884:16842) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffe5677fed6 a2=0xffffff9c a3=0x7ffe5677ff1e items=4 ppid=5509 pid=10343 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.887:16843) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/9A7DFC764729227CF588F5D106
type=PATH msg=audit(05/08/2019 15:00:41.887:16843) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645163 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.887:16843) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645163 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.887:16843) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.887:16843) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.887:16843) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.887:16843) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7fffbc1d1ed6 a2=0xffffff9c a3=0x7fffbc1d1f1e items=4 ppid=5509 pid=10344 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.887:16844) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/9E69211EFB2A893344259AE84A
type=PATH msg=audit(05/08/2019 15:00:41.887:16844) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645164 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.887:16844) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645164 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.887:16844) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.887:16844) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.887:16844) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.887:16844) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffea2751ed6 a2=0xffffff9c a3=0x7ffea2751f1e items=4 ppid=5509 pid=10345 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.890:16845) : proctitle=mv ./.gnupg/private-keys-v1.d/[PRIVACY].key ./.gnupg/private-keys-v1.d/F68A071862FD1001C6DFA7ADD9
type=PATH msg=audit(05/08/2019 15:00:41.890:16845) : item=3 name=./.gnupg/private-keys-v1.d/[PRIVACY].key.data inode=645165 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16845) : item=2 name=./.gnupg/private-keys-v1.d/[PRIVACY].key inode=645165 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16845) : item=1 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16845) : item=0 name=./.gnupg/private-keys-v1.d/ inode=94162 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.890:16845) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.890:16845) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffd3e5f2ed6 a2=0xffffff9c a3=0x7ffd3e5f2f1e items=4 ppid=5509 pid=10346 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.890:16846) : proctitle=mv ./.gnupg/trustdb.gpg ./.gnupg/trustdb.gpg.data
type=PATH msg=audit(05/08/2019 15:00:41.890:16846) : item=3 name=./.gnupg/trustdb.gpg.data inode=617199 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16846) : item=2 name=./.gnupg/trustdb.gpg inode=617199 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16846) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16846) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.890:16846) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.890:16846) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc80843f3c a2=0xffffff9c a3=0x7ffc80843f51 items=4 ppid=5509 pid=10347 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.890:16847) : proctitle=mv ./.gnupg/dirmngr.conf ./.gnupg/dirmngr.conf.data
type=PATH msg=audit(05/08/2019 15:00:41.890:16847) : item=3 name=./.gnupg/dirmngr.conf.data inode=645143 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16847) : item=2 name=./.gnupg/dirmngr.conf inode=645143 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16847) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.890:16847) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.890:16847) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.890:16847) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffdf726cf3a a2=0xffffff9c a3=0x7ffdf726cf50 items=4 ppid=5509 pid=10348 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.894:16848) : proctitle=mv ./.gnupg/gpg-agent.conf ./.gnupg/gpg-agent.conf.data
type=PATH msg=audit(05/08/2019 15:00:41.894:16848) : item=3 name=./.gnupg/gpg-agent.conf.data inode=645144 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.894:16848) : item=2 name=./.gnupg/gpg-agent.conf inode=645144 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.894:16848) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.894:16848) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.894:16848) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.894:16848) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc855a3f36 a2=0xffffff9c a3=0x7ffc855a3f4e items=4 ppid=5509 pid=10349 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.894:16849) : proctitle=mv ./.gnupg/gpg.conf ./.gnupg/gpg.conf.gpg
type=PATH msg=audit(05/08/2019 15:00:41.894:16849) : item=3 name=./.gnupg/gpg.conf.gpg inode=645145 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.894:16849) : item=2 name=./.gnupg/gpg.conf inode=645145 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.894:16849) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.894:16849) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.894:16849) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.894:16849) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc930e8f43 a2=0xffffff9c a3=0x7ffc930e8f55 items=4 ppid=5509 pid=10350 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.897:16850) : proctitle=mv ./.gnupg/pubring.kbx~ ./.gnupg/pubring.kbx~.ascii
type=PATH msg=audit(05/08/2019 15:00:41.897:16850) : item=3 name=./.gnupg/pubring.kbx~.ascii inode=645167 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16850) : item=2 name=./.gnupg/pubring.kbx~ inode=645167 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16850) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16850) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.897:16850) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.897:16850) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffce966df39 a2=0xffffff9c a3=0x7ffce966df4f items=4 ppid=5509 pid=10351 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.897:16851) : proctitle=mv ./.gnupg/random_seed ./.gnupg/random_seed.ascii
type=PATH msg=audit(05/08/2019 15:00:41.897:16851) : item=3 name=./.gnupg/random_seed.ascii inode=645168 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16851) : item=2 name=./.gnupg/random_seed inode=645168 dev=00:17 mode=file,600 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16851) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16851) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.897:16851) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.897:16851) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffe3b375f3b a2=0xffffff9c a3=0x7ffe3b375f50 items=4 ppid=5509 pid=10352 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.897:16852) : proctitle=mv ./.gnupg/sshcontrol ./.gnupg/sshcontrol.ascii
type=PATH msg=audit(05/08/2019 15:00:41.897:16852) : item=3 name=./.gnupg/sshcontrol.ascii inode=645169 dev=00:17 mode=file,640 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16852) : item=2 name=./.gnupg/sshcontrol inode=645169 dev=00:17 mode=file,640 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16852) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.897:16852) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.897:16852) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.897:16852) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffce32acf3d a2=0xffffff9c a3=0x7ffce32acf51 items=4 ppid=5509 pid=10353 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.900:16853) : proctitle=mv ./.gnupg/tofu.db ./.gnupg/tofu.db.gpg
type=PATH msg=audit(05/08/2019 15:00:41.900:16853) : item=3 name=./.gnupg/tofu.db.gpg inode=645170 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.900:16853) : item=2 name=./.gnupg/tofu.db inode=645170 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.900:16853) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.900:16853) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.900:16853) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.900:16853) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffccd97ef45 a2=0xffffff9c a3=0x7ffccd97ef56 items=4 ppid=5509 pid=10354 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.900:16854) : proctitle=mv ./.gnupg/pubring.kbx ./.gnupg/pubring.kbx.data
type=PATH msg=audit(05/08/2019 15:00:41.900:16854) : item=3 name=./.gnupg/pubring.kbx.data inode=645616 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.900:16854) : item=2 name=./.gnupg/pubring.kbx inode=645616 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.900:16854) : item=1 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.900:16854) : item=0 name=./.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.900:16854) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.900:16854) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc79c42f3c a2=0xffffff9c a3=0x7ffc79c42f51 items=4 ppid=5509 pid=10355 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:00:41.860:16825) : proctitle=mv ./.gnupg/crls.d/DIR.txt ./.gnupg/crls.d/DIR.txt.ascii
type=PATH msg=audit(05/08/2019 15:00:41.860:16825) : item=3 name=./.gnupg/crls.d/DIR.txt.ascii inode=645142 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.860:16825) : item=2 name=./.gnupg/crls.d/DIR.txt inode=645142 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=DELETE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.860:16825) : item=1 name=./.gnupg/crls.d/ inode=94160 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:00:41.860:16825) : item=0 name=./.gnupg/crls.d/ inode=94160 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:00:41.860:16825) : cwd=/home/arch
type=SYSCALL msg=audit(05/08/2019 15:00:41.860:16825) : arch=x86_64 syscall=renameat2 success=yes exit=0 a0=0xffffff9c a1=0x7ffc7034ef35 a2=0xffffff9c a3=0x7ffc7034ef4d items=4 ppid=5509 pid=10326 auid=arch uid=arch gid=arch euid=arch suid=arch fsuid=arch egid=arch sgid=arch fsgid=arch tty=(none) ses=242 comm=mv exe=/usr/bin/mv key=arch_gnupg
----
type=PROCTITLE msg=audit(05/08/2019 15:35:42.404:16951) : proctitle=/usr/bin/gpg --charset utf-8 --display-charset utf-8 --no-auto-check-trustdb --batch --no-tty --no-verbose --status-fd 2 --keyse
type=PATH msg=audit(05/08/2019 15:35:42.404:16951) : item=1 name=/home/arch/.gnupg/.#lk0x00005587ed613dc0.localhost.11449 inode=654324 dev=00:17 mode=file,644 ouid=arch ogid=arch rdev=00:00 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=PATH msg=audit(05/08/2019 15:35:42.404:16951) : item=0 name=/home/arch/.gnupg/ inode=291 dev=00:17 mode=dir,700 ouid=arch ogid=arch rdev=00:00 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0
type=CWD msg=audit(05/08/2019 15:35:42.404:16951) : cwd=/home/arch
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment