-- Logs begin at Sat 2017-01-21 23:33:21 CET, end at Sun 2017-01-22 00:27:00 CET. --
Jan 22 00:25:20 a qrexec-agent[465]: executed root:QUBESRPC qubes.VMShell disp-mgmt-a pid 1163
Jan 22 00:25:20 a audit[1163]: USER_AUTH pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a audit[1163]: USER_ACCT pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_succeed_if acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a su[1163]: (to root) root on none
Jan 22 00:25:20 a audit[1163]: CRED_ACQ pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit_printk_skb: 3 callbacks suppressed
Jan 22 00:25:20 a kernel: audit: type=1100 audit(1485041120.084:183): pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit: type=1101 audit(1485041120.084:184): pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_succeed_if acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit: type=1103 audit(1485041120.084:185): pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a systemd[1]: Created slice User Slice of root.
Jan 22 00:25:20 a systemd[1]: Starting User Manager for UID 0...
Jan 22 00:25:20 a systemd[1]: Started Session c13 of user root.
Jan 22 00:25:20 a audit[1164]: USER_ACCT pid=1164 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit: type=1101 audit(1485041120.104:186): pid=1164 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit: type=1006 audit(1485041120.104:187): pid=1164 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=12 res=1
Jan 22 00:25:20 a systemd[1164]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jan 22 00:25:20 a audit[1164]: USER_START pid=1164 uid=0 auid=0 ses=12 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit: type=1105 audit(1485041120.105:188): pid=1164 uid=0 auid=0 ses=12 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a systemd[1164]: Starting D-Bus User Message Bus Socket.
Jan 22 00:25:20 a systemd[1164]: Reached target Timers.
Jan 22 00:25:20 a systemd[1164]: Reached target Paths.
Jan 22 00:25:20 a systemd[1164]: Listening on D-Bus User Message Bus Socket.
Jan 22 00:25:20 a systemd[1164]: Reached target Sockets.
Jan 22 00:25:20 a systemd[1164]: Reached target Basic System.
Jan 22 00:25:20 a systemd[1164]: Reached target Default.
Jan 22 00:25:20 a systemd[1164]: Startup finished in 24ms.
Jan 22 00:25:20 a systemd[1]: Started User Manager for UID 0.
Jan 22 00:25:20 a kernel: audit: type=1130 audit(1485041120.140:189): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit: type=1105 audit(1485041120.141:190): pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a audit[1163]: USER_START pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a su[1163]: pam_unix(su-l:session): session opened for user root by (uid=0)
Jan 22 00:25:20 a qubes.VMShell-disp-mgmt-a[1192]: WARNING: Unable to locate current thin  version: /var/tmp/.root_62a99a_salt/version.
Jan 22 00:25:20 a su[1163]: pam_unix(su-l:session): session closed for user root
Jan 22 00:25:20 a audit[1163]: USER_END pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a audit[1163]: CRED_DISP pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit: type=1106 audit(1485041120.269:191): pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a kernel: audit: type=1104 audit(1485041120.269:192): pid=1163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a qrexec-agent[465]: send exit code 11
Jan 22 00:25:20 a qrexec-agent[465]: pid 1163 exited with 11
Jan 22 00:25:20 a qrexec-agent[465]: eintr
Jan 22 00:25:20 a systemd[1]: Stopping User Manager for UID 0...
Jan 22 00:25:20 a systemd[1164]: Stopped target Default.
Jan 22 00:25:20 a systemd[1164]: Stopped target Basic System.
Jan 22 00:25:20 a systemd[1164]: Stopped target Paths.
Jan 22 00:25:20 a systemd[1164]: Stopped target Sockets.
Jan 22 00:25:20 a systemd[1164]: Closed D-Bus User Message Bus Socket.
Jan 22 00:25:20 a systemd[1164]: Reached target Shutdown.
Jan 22 00:25:20 a systemd[1164]: Starting Exit the Session...
Jan 22 00:25:20 a systemd[1164]: Stopped target Timers.
Jan 22 00:25:20 a systemd[1164]: Received SIGRTMIN+24 from PID 1205 (kill).
Jan 22 00:25:20 a systemd[1]: Stopped User Manager for UID 0.
Jan 22 00:25:20 a audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a systemd[1]: Removed slice User Slice of root.
Jan 22 00:25:20 a qrexec-agent[465]: executed root:QUBESRPC qubes.Filecopy disp-mgmt-a pid 1213
Jan 22 00:25:20 a audit[1213]: USER_AUTH pid=1213 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a audit[1213]: USER_ACCT pid=1213 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_succeed_if acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a su[1213]: (to root) root on none
Jan 22 00:25:20 a audit[1213]: CRED_ACQ pid=1213 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a systemd[1]: Created slice User Slice of root.
Jan 22 00:25:20 a systemd[1]: Starting User Manager for UID 0...
Jan 22 00:25:20 a systemd[1]: Started Session c14 of user root.
Jan 22 00:25:20 a audit[1214]: USER_ACCT pid=1214 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a systemd[1214]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jan 22 00:25:20 a audit[1214]: USER_START pid=1214 uid=0 auid=0 ses=13 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a systemd[1214]: Reached target Paths.
Jan 22 00:25:20 a systemd[1214]: Starting D-Bus User Message Bus Socket.
Jan 22 00:25:20 a systemd[1214]: Reached target Timers.
Jan 22 00:25:20 a systemd[1214]: Listening on D-Bus User Message Bus Socket.
Jan 22 00:25:20 a systemd[1214]: Reached target Sockets.
Jan 22 00:25:20 a systemd[1214]: Reached target Basic System.
Jan 22 00:25:20 a systemd[1214]: Reached target Default.
Jan 22 00:25:20 a systemd[1214]: Startup finished in 29ms.
Jan 22 00:25:20 a audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a audit[1213]: USER_START pid=1213 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a su[1213]: pam_unix(su-l:session): session opened for user root by (uid=0)
Jan 22 00:25:20 a systemd[1]: Started User Manager for UID 0.
Jan 22 00:25:20 a audit[1213]: USER_END pid=1213 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a audit[1213]: CRED_DISP pid=1213 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a su[1213]: pam_unix(su-l:session): session closed for user root
Jan 22 00:25:20 a qrexec-agent[465]: send exit code 17
Jan 22 00:25:20 a qrexec-agent[465]: pid 1213 exited with 17
Jan 22 00:25:20 a qrexec-agent[465]: eintr
Jan 22 00:25:20 a systemd[1]: Stopping User Manager for UID 0...
Jan 22 00:25:20 a systemd[1214]: Stopped target Default.
Jan 22 00:25:20 a systemd[1214]: Stopped target Basic System.
Jan 22 00:25:20 a systemd[1214]: Stopped target Sockets.
Jan 22 00:25:20 a systemd[1214]: Closed D-Bus User Message Bus Socket.
Jan 22 00:25:20 a systemd[1214]: Reached target Shutdown.
Jan 22 00:25:20 a systemd[1214]: Starting Exit the Session...
Jan 22 00:25:20 a systemd[1214]: Stopped target Timers.
Jan 22 00:25:20 a systemd[1214]: Stopped target Paths.
Jan 22 00:25:20 a systemd[1214]: Received SIGRTMIN+24 from PID 1246 (kill).
Jan 22 00:25:20 a audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:20 a systemd[1]: Stopped User Manager for UID 0.
Jan 22 00:25:21 a systemd[1]: Removed slice User Slice of root.
Jan 22 00:25:21 a qrexec-agent[465]: executed root:QUBESRPC qubes.Filecopy disp-mgmt-a pid 1254
Jan 22 00:25:21 a audit[1254]: USER_AUTH pid=1254 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a audit[1254]: USER_ACCT pid=1254 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_succeed_if acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a su[1254]: (to root) root on none
Jan 22 00:25:21 a audit[1254]: CRED_ACQ pid=1254 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a systemd[1]: Created slice User Slice of root.
Jan 22 00:25:21 a systemd[1]: Starting User Manager for UID 0...
Jan 22 00:25:21 a systemd[1]: Started Session c15 of user root.
Jan 22 00:25:21 a audit[1255]: USER_ACCT pid=1255 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a systemd[1255]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jan 22 00:25:21 a audit[1255]: USER_START pid=1255 uid=0 auid=0 ses=14 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a systemd[1255]: Reached target Paths.
Jan 22 00:25:21 a systemd[1255]: Reached target Timers.
Jan 22 00:25:21 a systemd[1255]: Starting D-Bus User Message Bus Socket.
Jan 22 00:25:21 a systemd[1255]: Listening on D-Bus User Message Bus Socket.
Jan 22 00:25:21 a systemd[1255]: Reached target Sockets.
Jan 22 00:25:21 a systemd[1255]: Reached target Basic System.
Jan 22 00:25:21 a systemd[1255]: Reached target Default.
Jan 22 00:25:21 a systemd[1255]: Startup finished in 24ms.
Jan 22 00:25:21 a systemd[1]: Started User Manager for UID 0.
Jan 22 00:25:21 a audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a su[1254]: pam_unix(su-l:session): session opened for user root by (uid=0)
Jan 22 00:25:21 a audit[1254]: USER_START pid=1254 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a su[1254]: pam_unix(su-l:session): session closed for user root
Jan 22 00:25:21 a audit[1254]: USER_END pid=1254 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a audit[1254]: CRED_DISP pid=1254 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a qrexec-agent[465]: send exit code 17
Jan 22 00:25:21 a qrexec-agent[465]: pid 1254 exited with 17
Jan 22 00:25:21 a qrexec-agent[465]: eintr
Jan 22 00:25:21 a systemd[1]: Stopping User Manager for UID 0...
Jan 22 00:25:21 a systemd[1255]: Stopped target Default.
Jan 22 00:25:21 a systemd[1255]: Stopped target Basic System.
Jan 22 00:25:21 a systemd[1255]: Stopped target Sockets.
Jan 22 00:25:21 a systemd[1255]: Closed D-Bus User Message Bus Socket.
Jan 22 00:25:21 a systemd[1255]: Reached target Shutdown.
Jan 22 00:25:21 a systemd[1255]: Starting Exit the Session...
Jan 22 00:25:21 a systemd[1255]: Stopped target Paths.
Jan 22 00:25:21 a systemd[1255]: Stopped target Timers.
Jan 22 00:25:21 a systemd[1255]: Received SIGRTMIN+24 from PID 1287 (kill).
Jan 22 00:25:21 a audit[1258]: USER_END pid=1258 uid=0 auid=0 ses=14 msg='op=PAM:session_close grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a systemd[1]: Stopped User Manager for UID 0.
Jan 22 00:25:21 a systemd[1258]: pam_unix(systemd-user:session): session closed for user root
Jan 22 00:25:21 a audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:21 a systemd[1]: Removed slice User Slice of root.
Jan 22 00:25:22 a qrexec-agent[465]: executed root:QUBESRPC qubes.VMShell disp-mgmt-a pid 1295
Jan 22 00:25:22 a audit[1295]: USER_AUTH pid=1295 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a audit[1295]: USER_ACCT pid=1295 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_succeed_if acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a su[1295]: (to root) root on none
Jan 22 00:25:22 a audit[1295]: CRED_ACQ pid=1295 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a systemd[1]: Created slice User Slice of root.
Jan 22 00:25:22 a systemd[1]: Starting User Manager for UID 0...
Jan 22 00:25:22 a systemd[1]: Started Session c16 of user root.
Jan 22 00:25:22 a audit[1296]: USER_ACCT pid=1296 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a systemd[1296]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jan 22 00:25:22 a audit[1296]: USER_START pid=1296 uid=0 auid=0 ses=15 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a systemd[1296]: Reached target Timers.
Jan 22 00:25:22 a systemd[1296]: Reached target Paths.
Jan 22 00:25:22 a systemd[1296]: Starting D-Bus User Message Bus Socket.
Jan 22 00:25:22 a systemd[1296]: Listening on D-Bus User Message Bus Socket.
Jan 22 00:25:22 a systemd[1296]: Reached target Sockets.
Jan 22 00:25:22 a systemd[1296]: Reached target Basic System.
Jan 22 00:25:22 a audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a systemd[1296]: Reached target Default.
Jan 22 00:25:22 a systemd[1296]: Startup finished in 21ms.
Jan 22 00:25:22 a systemd[1]: Started User Manager for UID 0.
Jan 22 00:25:22 a audit[1295]: USER_START pid=1295 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a su[1295]: pam_unix(su-l:session): session opened for user root by (uid=0)
Jan 22 00:25:22 a qubes.VMShell-disp-mgmt-a[1324]: WARNING: Unable to locate current thin  version: /var/tmp/.root_62a99a_salt/version.
Jan 22 00:25:22 a su[1295]: pam_unix(su-l:session): session closed for user root
Jan 22 00:25:22 a audit[1295]: USER_END pid=1295 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a audit[1295]: CRED_DISP pid=1295 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a qrexec-agent[465]: send exit code 11
Jan 22 00:25:22 a qrexec-agent[465]: pid 1295 exited with 11
Jan 22 00:25:22 a qrexec-agent[465]: eintr
Jan 22 00:25:22 a systemd[1]: Stopping User Manager for UID 0...
Jan 22 00:25:22 a systemd[1296]: Stopped target Default.
Jan 22 00:25:22 a systemd[1296]: Stopped target Basic System.
Jan 22 00:25:22 a systemd[1296]: Stopped target Paths.
Jan 22 00:25:22 a systemd[1296]: Stopped target Timers.
Jan 22 00:25:22 a systemd[1296]: Stopped target Sockets.
Jan 22 00:25:22 a systemd[1296]: Closed D-Bus User Message Bus Socket.
Jan 22 00:25:22 a systemd[1296]: Reached target Shutdown.
Jan 22 00:25:22 a systemd[1296]: Starting Exit the Session...
Jan 22 00:25:22 a systemd[1296]: Received SIGRTMIN+24 from PID 1337 (kill).
Jan 22 00:25:22 a systemd[1]: Stopped User Manager for UID 0.
Jan 22 00:25:22 a audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:25:22 a systemd[1]: Removed slice User Slice of root.
Jan 22 00:27:00 a systemd[1]: Starting Qubes check for VM updates and notify dom0...
Jan 22 00:27:00 a kernel: audit_printk_skb: 105 callbacks suppressed
Jan 22 00:27:00 a kernel: audit: type=1130 audit(1485041220.431:228): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-update-check comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:27:00 a kernel: audit: type=1131 audit(1485041220.431:229): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-update-check comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:27:00 a audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-update-check comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:27:00 a audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-update-check comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Jan 22 00:27:00 a systemd[1]: Started Qubes check for VM updates and notify dom0.