May 18 15:25:50 steve-main su[7708]: (to steve) root on none
May 18 15:25:50 steve-main audit[7708]: CRED_ACQ pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7708]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7708]: USER_START pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main kernel: audit: type=1100 audit(1652883950.790:159): pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main kernel: audit: type=1101 audit(1652883950.790:160): pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main kernel: audit: type=1103 audit(1652883950.790:161): pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main kernel: audit: type=1105 audit(1652883950.790:162): pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7708]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7708]: USER_END pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7708]: CRED_DISP pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main kernel: audit: type=1106 audit(1652883950.793:163): pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main kernel: audit: type=1104 audit(1652883950.793:164): pid=7708 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7711]: USER_AUTH pid=7711 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7711]: USER_ACCT pid=7711 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7711]: (to steve) root on none
May 18 15:25:50 steve-main audit[7711]: CRED_ACQ pid=7711 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7711]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7711]: USER_START pid=7711 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main kernel: audit: type=1100 audit(1652883950.796:165): pid=7711 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7711]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7711]: USER_END pid=7711 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7711]: CRED_DISP pid=7711 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7714]: USER_AUTH pid=7714 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7714]: USER_ACCT pid=7714 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7714]: (to steve) root on none
May 18 15:25:50 steve-main audit[7714]: CRED_ACQ pid=7714 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7714]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7714]: USER_START pid=7714 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7714]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7714]: USER_END pid=7714 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7714]: CRED_DISP pid=7714 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7717]: USER_AUTH pid=7717 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7717]: USER_ACCT pid=7717 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7717]: (to steve) root on none
May 18 15:25:50 steve-main audit[7717]: CRED_ACQ pid=7717 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7717]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7717]: USER_START pid=7717 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7717]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7717]: USER_END pid=7717 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7717]: CRED_DISP pid=7717 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7720]: USER_AUTH pid=7720 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7720]: USER_ACCT pid=7720 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7720]: (to steve) root on none
May 18 15:25:50 steve-main audit[7720]: CRED_ACQ pid=7720 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7720]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7720]: USER_START pid=7720 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7720]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7720]: USER_END pid=7720 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7720]: CRED_DISP pid=7720 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7723]: USER_AUTH pid=7723 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7723]: USER_ACCT pid=7723 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7723]: (to steve) root on none
May 18 15:25:50 steve-main audit[7723]: CRED_ACQ pid=7723 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7723]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7723]: USER_START pid=7723 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7723]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7723]: USER_END pid=7723 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7723]: CRED_DISP pid=7723 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7726]: USER_AUTH pid=7726 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7726]: USER_ACCT pid=7726 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7726]: (to steve) root on none
May 18 15:25:50 steve-main audit[7726]: CRED_ACQ pid=7726 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7726]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7726]: USER_START pid=7726 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7726]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7726]: USER_END pid=7726 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7726]: CRED_DISP pid=7726 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7729]: USER_AUTH pid=7729 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7729]: USER_ACCT pid=7729 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7729]: (to steve) root on none
May 18 15:25:50 steve-main audit[7729]: CRED_ACQ pid=7729 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7729]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7729]: USER_START pid=7729 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7729]: USER_END pid=7729 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7729]: CRED_DISP pid=7729 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7729]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7732]: USER_AUTH pid=7732 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7732]: USER_ACCT pid=7732 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7732]: (to steve) root on none
May 18 15:25:50 steve-main audit[7732]: CRED_ACQ pid=7732 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7732]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7732]: USER_START pid=7732 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7732]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7732]: USER_END pid=7732 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7732]: CRED_DISP pid=7732 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7735]: USER_AUTH pid=7735 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7735]: USER_ACCT pid=7735 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7735]: (to steve) root on none
May 18 15:25:50 steve-main audit[7735]: CRED_ACQ pid=7735 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7735]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7735]: USER_START pid=7735 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7735]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7735]: USER_END pid=7735 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7735]: CRED_DISP pid=7735 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7738]: USER_AUTH pid=7738 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7738]: USER_ACCT pid=7738 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7738]: (to steve) root on none
May 18 15:25:50 steve-main audit[7738]: CRED_ACQ pid=7738 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7738]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7738]: USER_START pid=7738 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7738]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7738]: USER_END pid=7738 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7738]: CRED_DISP pid=7738 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7741]: USER_AUTH pid=7741 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7741]: USER_ACCT pid=7741 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7741]: (to steve) root on none
May 18 15:25:50 steve-main audit[7741]: CRED_ACQ pid=7741 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7741]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7741]: USER_START pid=7741 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7741]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7741]: USER_END pid=7741 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7741]: CRED_DISP pid=7741 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7744]: USER_AUTH pid=7744 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7744]: USER_ACCT pid=7744 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7744]: (to steve) root on none
May 18 15:25:50 steve-main audit[7744]: CRED_ACQ pid=7744 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7744]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7744]: USER_START pid=7744 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7744]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7744]: USER_END pid=7744 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7744]: CRED_DISP pid=7744 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7747]: USER_AUTH pid=7747 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7747]: USER_ACCT pid=7747 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7747]: (to steve) root on none
May 18 15:25:50 steve-main audit[7747]: CRED_ACQ pid=7747 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7747]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7747]: USER_START pid=7747 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7747]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7747]: USER_END pid=7747 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7747]: CRED_DISP pid=7747 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7750]: USER_AUTH pid=7750 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7750]: USER_ACCT pid=7750 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7750]: (to steve) root on none
May 18 15:25:50 steve-main audit[7750]: CRED_ACQ pid=7750 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7750]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7750]: USER_START pid=7750 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7750]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7750]: USER_END pid=7750 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7750]: CRED_DISP pid=7750 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7753]: USER_AUTH pid=7753 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7753]: USER_ACCT pid=7753 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7753]: (to steve) root on none
May 18 15:25:50 steve-main audit[7753]: CRED_ACQ pid=7753 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7753]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7753]: USER_START pid=7753 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7753]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7753]: USER_END pid=7753 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7753]: CRED_DISP pid=7753 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7756]: USER_AUTH pid=7756 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7756]: USER_ACCT pid=7756 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7756]: (to steve) root on none
May 18 15:25:50 steve-main audit[7756]: CRED_ACQ pid=7756 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7756]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7756]: USER_START pid=7756 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7756]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7756]: USER_END pid=7756 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7756]: CRED_DISP pid=7756 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7759]: USER_AUTH pid=7759 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7759]: USER_ACCT pid=7759 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7759]: (to steve) root on none
May 18 15:25:50 steve-main audit[7759]: CRED_ACQ pid=7759 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7759]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7759]: USER_START pid=7759 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7759]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7759]: USER_END pid=7759 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7759]: CRED_DISP pid=7759 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7762]: USER_AUTH pid=7762 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7762]: USER_ACCT pid=7762 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7762]: (to steve) root on none
May 18 15:25:50 steve-main audit[7762]: CRED_ACQ pid=7762 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7762]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7762]: USER_START pid=7762 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7762]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7762]: USER_END pid=7762 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7762]: CRED_DISP pid=7762 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7765]: USER_AUTH pid=7765 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7765]: USER_ACCT pid=7765 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7765]: (to steve) root on none
May 18 15:25:50 steve-main audit[7765]: CRED_ACQ pid=7765 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7765]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7765]: USER_START pid=7765 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7765]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7765]: USER_END pid=7765 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7765]: CRED_DISP pid=7765 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7768]: USER_AUTH pid=7768 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7768]: USER_ACCT pid=7768 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7768]: (to steve) root on none
May 18 15:25:50 steve-main audit[7768]: CRED_ACQ pid=7768 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7768]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7768]: USER_START pid=7768 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7768]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7768]: USER_END pid=7768 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7768]: CRED_DISP pid=7768 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7771]: USER_AUTH pid=7771 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7771]: USER_ACCT pid=7771 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7771]: (to steve) root on none
May 18 15:25:50 steve-main audit[7771]: CRED_ACQ pid=7771 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7771]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7771]: USER_START pid=7771 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7771]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7771]: USER_END pid=7771 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7771]: CRED_DISP pid=7771 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7774]: USER_AUTH pid=7774 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7774]: USER_ACCT pid=7774 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7774]: (to steve) root on none
May 18 15:25:50 steve-main audit[7774]: CRED_ACQ pid=7774 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7774]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7774]: USER_START pid=7774 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7774]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7774]: USER_END pid=7774 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7774]: CRED_DISP pid=7774 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7777]: USER_AUTH pid=7777 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7777]: USER_ACCT pid=7777 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7777]: (to steve) root on none
May 18 15:25:50 steve-main audit[7777]: CRED_ACQ pid=7777 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7777]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7777]: USER_START pid=7777 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7777]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7777]: USER_END pid=7777 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7777]: CRED_DISP pid=7777 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7780]: USER_AUTH pid=7780 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7780]: USER_ACCT pid=7780 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7780]: (to steve) root on none
May 18 15:25:50 steve-main audit[7780]: CRED_ACQ pid=7780 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7780]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7780]: USER_START pid=7780 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7780]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7780]: USER_END pid=7780 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7780]: CRED_DISP pid=7780 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7783]: USER_AUTH pid=7783 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7783]: USER_ACCT pid=7783 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7783]: (to steve) root on none
May 18 15:25:50 steve-main audit[7783]: CRED_ACQ pid=7783 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7783]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7783]: USER_START pid=7783 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7783]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7783]: USER_END pid=7783 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7783]: CRED_DISP pid=7783 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7786]: USER_AUTH pid=7786 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7786]: USER_ACCT pid=7786 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7786]: (to steve) root on none
May 18 15:25:50 steve-main audit[7786]: CRED_ACQ pid=7786 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7786]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7786]: USER_START pid=7786 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7786]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7786]: USER_END pid=7786 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7786]: CRED_DISP pid=7786 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7789]: USER_AUTH pid=7789 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7789]: USER_ACCT pid=7789 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7789]: (to steve) root on none
May 18 15:25:50 steve-main audit[7789]: CRED_ACQ pid=7789 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7789]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7789]: USER_START pid=7789 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7789]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7789]: USER_END pid=7789 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7789]: CRED_DISP pid=7789 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7792]: USER_AUTH pid=7792 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7792]: USER_ACCT pid=7792 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7792]: (to steve) root on none
May 18 15:25:50 steve-main audit[7792]: CRED_ACQ pid=7792 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7792]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7792]: USER_START pid=7792 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7792]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7792]: USER_END pid=7792 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7792]: CRED_DISP pid=7792 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7795]: USER_AUTH pid=7795 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7795]: USER_ACCT pid=7795 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7795]: (to steve) root on none
May 18 15:25:50 steve-main audit[7795]: CRED_ACQ pid=7795 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7795]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7795]: USER_START pid=7795 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7795]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7795]: USER_END pid=7795 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7795]: CRED_DISP pid=7795 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7800]: USER_AUTH pid=7800 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7800]: USER_ACCT pid=7800 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7800]: (to steve) root on none
May 18 15:25:50 steve-main audit[7800]: CRED_ACQ pid=7800 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7800]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7800]: USER_START pid=7800 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7800]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7800]: USER_END pid=7800 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7800]: CRED_DISP pid=7800 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7803]: USER_AUTH pid=7803 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7803]: USER_ACCT pid=7803 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7803]: (to steve) root on none
May 18 15:25:50 steve-main audit[7803]: CRED_ACQ pid=7803 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7803]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7803]: USER_START pid=7803 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7803]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7803]: USER_END pid=7803 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7803]: CRED_DISP pid=7803 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7806]: USER_AUTH pid=7806 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7806]: USER_ACCT pid=7806 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7806]: (to steve) root on none
May 18 15:25:50 steve-main audit[7806]: CRED_ACQ pid=7806 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7806]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7806]: USER_START pid=7806 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7806]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7806]: USER_END pid=7806 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7806]: CRED_DISP pid=7806 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7809]: USER_AUTH pid=7809 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7809]: USER_ACCT pid=7809 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7809]: (to steve) root on none
May 18 15:25:50 steve-main audit[7809]: CRED_ACQ pid=7809 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7809]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7809]: USER_START pid=7809 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7809]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7809]: USER_END pid=7809 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7809]: CRED_DISP pid=7809 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7812]: USER_AUTH pid=7812 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7812]: USER_ACCT pid=7812 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7812]: (to steve) root on none
May 18 15:25:50 steve-main audit[7812]: CRED_ACQ pid=7812 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7812]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7812]: USER_START pid=7812 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7812]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7812]: USER_END pid=7812 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7812]: CRED_DISP pid=7812 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7815]: USER_AUTH pid=7815 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7815]: USER_ACCT pid=7815 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7815]: (to steve) root on none
May 18 15:25:50 steve-main audit[7815]: CRED_ACQ pid=7815 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main su[7815]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:50 steve-main audit[7815]: USER_START pid=7815 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7815]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:50 steve-main audit[7815]: USER_END pid=7815 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:50 steve-main audit[7815]: CRED_DISP pid=7815 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7818]: USER_AUTH pid=7818 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7818]: USER_ACCT pid=7818 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7818]: (to steve) root on none
May 18 15:25:51 steve-main audit[7818]: CRED_ACQ pid=7818 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7818]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7818]: USER_START pid=7818 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7818]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7818]: USER_END pid=7818 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7818]: CRED_DISP pid=7818 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7821]: USER_AUTH pid=7821 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7821]: USER_ACCT pid=7821 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7821]: (to steve) root on none
May 18 15:25:51 steve-main audit[7821]: CRED_ACQ pid=7821 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7821]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7821]: USER_START pid=7821 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7821]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7821]: USER_END pid=7821 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7821]: CRED_DISP pid=7821 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7824]: USER_AUTH pid=7824 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7824]: USER_ACCT pid=7824 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7824]: (to steve) root on none
May 18 15:25:51 steve-main audit[7824]: CRED_ACQ pid=7824 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7824]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7824]: USER_START pid=7824 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7824]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7824]: USER_END pid=7824 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7824]: CRED_DISP pid=7824 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7827]: USER_AUTH pid=7827 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7827]: USER_ACCT pid=7827 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7827]: (to steve) root on none
May 18 15:25:51 steve-main audit[7827]: CRED_ACQ pid=7827 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7827]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7827]: USER_START pid=7827 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7827]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7827]: USER_END pid=7827 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7827]: CRED_DISP pid=7827 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7830]: USER_AUTH pid=7830 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7830]: USER_ACCT pid=7830 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7830]: (to steve) root on none
May 18 15:25:51 steve-main audit[7830]: CRED_ACQ pid=7830 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7830]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7830]: USER_START pid=7830 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7830]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7830]: USER_END pid=7830 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7830]: CRED_DISP pid=7830 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7833]: USER_AUTH pid=7833 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7833]: USER_ACCT pid=7833 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7833]: (to steve) root on none
May 18 15:25:51 steve-main audit[7833]: CRED_ACQ pid=7833 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7833]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7833]: USER_START pid=7833 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7833]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7833]: USER_END pid=7833 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7833]: CRED_DISP pid=7833 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7836]: USER_AUTH pid=7836 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7836]: USER_ACCT pid=7836 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7836]: (to steve) root on none
May 18 15:25:51 steve-main audit[7836]: CRED_ACQ pid=7836 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7836]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7836]: USER_START pid=7836 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7836]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7836]: USER_END pid=7836 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7836]: CRED_DISP pid=7836 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7839]: USER_AUTH pid=7839 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7839]: USER_ACCT pid=7839 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7839]: (to steve) root on none
May 18 15:25:51 steve-main audit[7839]: CRED_ACQ pid=7839 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7839]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7839]: USER_START pid=7839 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7839]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7839]: USER_END pid=7839 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7839]: CRED_DISP pid=7839 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7842]: USER_AUTH pid=7842 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7842]: USER_ACCT pid=7842 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7842]: (to steve) root on none
May 18 15:25:51 steve-main audit[7842]: CRED_ACQ pid=7842 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7842]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7842]: USER_START pid=7842 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7842]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7842]: USER_END pid=7842 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7842]: CRED_DISP pid=7842 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7845]: USER_AUTH pid=7845 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7845]: USER_ACCT pid=7845 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7845]: (to steve) root on none
May 18 15:25:51 steve-main audit[7845]: CRED_ACQ pid=7845 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7845]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7845]: USER_START pid=7845 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7845]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7845]: USER_END pid=7845 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7845]: CRED_DISP pid=7845 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7848]: USER_AUTH pid=7848 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7848]: USER_ACCT pid=7848 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7848]: (to steve) root on none
May 18 15:25:51 steve-main audit[7848]: CRED_ACQ pid=7848 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7848]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7848]: USER_START pid=7848 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7848]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7848]: USER_END pid=7848 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7848]: CRED_DISP pid=7848 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7851]: USER_AUTH pid=7851 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7851]: USER_ACCT pid=7851 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7851]: (to steve) root on none
May 18 15:25:51 steve-main audit[7851]: CRED_ACQ pid=7851 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7851]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7851]: USER_START pid=7851 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7851]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7851]: USER_END pid=7851 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7851]: CRED_DISP pid=7851 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7854]: USER_AUTH pid=7854 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7854]: USER_ACCT pid=7854 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7854]: (to steve) root on none
May 18 15:25:51 steve-main audit[7854]: CRED_ACQ pid=7854 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7854]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7854]: USER_START pid=7854 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7854]: USER_END pid=7854 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7854]: CRED_DISP pid=7854 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7854]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7857]: USER_AUTH pid=7857 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7857]: USER_ACCT pid=7857 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7857]: (to steve) root on none
May 18 15:25:51 steve-main audit[7857]: CRED_ACQ pid=7857 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7857]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7857]: USER_START pid=7857 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7857]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7857]: USER_END pid=7857 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7857]: CRED_DISP pid=7857 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7860]: USER_AUTH pid=7860 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7860]: USER_ACCT pid=7860 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7860]: (to steve) root on none
May 18 15:25:51 steve-main audit[7860]: CRED_ACQ pid=7860 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7860]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7860]: USER_START pid=7860 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7860]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7860]: USER_END pid=7860 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7860]: CRED_DISP pid=7860 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7863]: USER_AUTH pid=7863 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7863]: USER_ACCT pid=7863 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7863]: (to steve) root on none
May 18 15:25:51 steve-main audit[7863]: CRED_ACQ pid=7863 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7863]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7863]: USER_START pid=7863 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7863]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7863]: USER_END pid=7863 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7863]: CRED_DISP pid=7863 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7866]: USER_AUTH pid=7866 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7866]: USER_ACCT pid=7866 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7866]: (to steve) root on none
May 18 15:25:51 steve-main audit[7866]: CRED_ACQ pid=7866 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7866]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7866]: USER_START pid=7866 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7866]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7866]: USER_END pid=7866 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7866]: CRED_DISP pid=7866 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7869]: USER_AUTH pid=7869 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7869]: USER_ACCT pid=7869 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7869]: (to steve) root on none
May 18 15:25:51 steve-main audit[7869]: CRED_ACQ pid=7869 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7869]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7869]: USER_START pid=7869 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7869]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7869]: USER_END pid=7869 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7869]: CRED_DISP pid=7869 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7872]: USER_AUTH pid=7872 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7872]: USER_ACCT pid=7872 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7872]: (to steve) root on none
May 18 15:25:51 steve-main audit[7872]: CRED_ACQ pid=7872 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7872]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7872]: USER_START pid=7872 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7872]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7872]: USER_END pid=7872 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7872]: CRED_DISP pid=7872 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7875]: USER_AUTH pid=7875 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7875]: USER_ACCT pid=7875 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7875]: (to steve) root on none
May 18 15:25:51 steve-main audit[7875]: CRED_ACQ pid=7875 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7875]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7875]: USER_START pid=7875 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7875]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7875]: USER_END pid=7875 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7875]: CRED_DISP pid=7875 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7878]: USER_AUTH pid=7878 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7878]: USER_ACCT pid=7878 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7878]: (to steve) root on none
May 18 15:25:51 steve-main audit[7878]: CRED_ACQ pid=7878 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7878]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7878]: USER_START pid=7878 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7878]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7878]: USER_END pid=7878 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7878]: CRED_DISP pid=7878 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7881]: USER_AUTH pid=7881 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7881]: USER_ACCT pid=7881 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7881]: (to steve) root on none
May 18 15:25:51 steve-main audit[7881]: CRED_ACQ pid=7881 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7881]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7881]: USER_START pid=7881 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7881]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7881]: USER_END pid=7881 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7881]: CRED_DISP pid=7881 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7884]: USER_AUTH pid=7884 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7884]: USER_ACCT pid=7884 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7884]: (to steve) root on none
May 18 15:25:51 steve-main audit[7884]: CRED_ACQ pid=7884 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7884]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7884]: USER_START pid=7884 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7884]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7884]: USER_END pid=7884 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7884]: CRED_DISP pid=7884 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7887]: USER_AUTH pid=7887 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7887]: USER_ACCT pid=7887 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7887]: (to steve) root on none
May 18 15:25:51 steve-main audit[7887]: CRED_ACQ pid=7887 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7887]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7887]: USER_START pid=7887 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7887]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7887]: USER_END pid=7887 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7887]: CRED_DISP pid=7887 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7890]: USER_AUTH pid=7890 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7890]: USER_ACCT pid=7890 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7890]: (to steve) root on none
May 18 15:25:51 steve-main audit[7890]: CRED_ACQ pid=7890 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7890]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7890]: USER_START pid=7890 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7890]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7890]: USER_END pid=7890 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7890]: CRED_DISP pid=7890 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7893]: USER_AUTH pid=7893 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7893]: USER_ACCT pid=7893 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7893]: (to steve) root on none
May 18 15:25:51 steve-main audit[7893]: CRED_ACQ pid=7893 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7893]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7893]: USER_START pid=7893 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7893]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7893]: USER_END pid=7893 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7893]: CRED_DISP pid=7893 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7896]: USER_AUTH pid=7896 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7896]: USER_ACCT pid=7896 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7896]: (to steve) root on none
May 18 15:25:51 steve-main audit[7896]: CRED_ACQ pid=7896 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7896]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7896]: USER_START pid=7896 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7896]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7896]: USER_END pid=7896 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7896]: CRED_DISP pid=7896 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7899]: USER_AUTH pid=7899 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7899]: USER_ACCT pid=7899 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7899]: (to steve) root on none
May 18 15:25:51 steve-main audit[7899]: CRED_ACQ pid=7899 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7899]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7899]: USER_START pid=7899 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7899]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7899]: USER_END pid=7899 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7899]: CRED_DISP pid=7899 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7902]: USER_AUTH pid=7902 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7902]: USER_ACCT pid=7902 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7902]: (to steve) root on none
May 18 15:25:51 steve-main audit[7902]: CRED_ACQ pid=7902 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7902]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7902]: USER_START pid=7902 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7902]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7902]: USER_END pid=7902 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7902]: CRED_DISP pid=7902 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7905]: USER_AUTH pid=7905 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7905]: USER_ACCT pid=7905 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7905]: (to steve) root on none
May 18 15:25:51 steve-main audit[7905]: CRED_ACQ pid=7905 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7905]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7905]: USER_START pid=7905 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7905]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7905]: USER_END pid=7905 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7905]: CRED_DISP pid=7905 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7908]: USER_AUTH pid=7908 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7908]: USER_ACCT pid=7908 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7908]: (to steve) root on none
May 18 15:25:51 steve-main audit[7908]: CRED_ACQ pid=7908 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7908]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7908]: USER_START pid=7908 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7908]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7908]: USER_END pid=7908 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7908]: CRED_DISP pid=7908 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7911]: USER_AUTH pid=7911 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7911]: USER_ACCT pid=7911 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7911]: (to steve) root on none
May 18 15:25:51 steve-main audit[7911]: CRED_ACQ pid=7911 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7911]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7911]: USER_START pid=7911 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7911]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7911]: USER_END pid=7911 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7911]: CRED_DISP pid=7911 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7914]: USER_AUTH pid=7914 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7914]: USER_ACCT pid=7914 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7914]: (to steve) root on none
May 18 15:25:51 steve-main audit[7914]: CRED_ACQ pid=7914 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7914]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7914]: USER_START pid=7914 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7914]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7914]: USER_END pid=7914 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7914]: CRED_DISP pid=7914 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7917]: USER_AUTH pid=7917 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7917]: USER_ACCT pid=7917 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7917]: (to steve) root on none
May 18 15:25:51 steve-main audit[7917]: CRED_ACQ pid=7917 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7917]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7917]: USER_START pid=7917 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7917]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7917]: USER_END pid=7917 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7917]: CRED_DISP pid=7917 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7920]: USER_AUTH pid=7920 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7920]: USER_ACCT pid=7920 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7920]: (to steve) root on none
May 18 15:25:51 steve-main audit[7920]: CRED_ACQ pid=7920 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7920]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7920]: USER_START pid=7920 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7920]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7920]: USER_END pid=7920 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7920]: CRED_DISP pid=7920 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7923]: USER_AUTH pid=7923 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7923]: USER_ACCT pid=7923 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7923]: (to steve) root on none
May 18 15:25:51 steve-main audit[7923]: CRED_ACQ pid=7923 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7923]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7923]: USER_START pid=7923 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7923]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7923]: USER_END pid=7923 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7923]: CRED_DISP pid=7923 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7926]: USER_AUTH pid=7926 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7926]: USER_ACCT pid=7926 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7926]: (to steve) root on none
May 18 15:25:51 steve-main audit[7926]: CRED_ACQ pid=7926 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7926]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7926]: USER_START pid=7926 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7926]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7926]: USER_END pid=7926 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7926]: CRED_DISP pid=7926 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7929]: USER_AUTH pid=7929 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7929]: USER_ACCT pid=7929 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7929]: (to steve) root on none
May 18 15:25:51 steve-main audit[7929]: CRED_ACQ pid=7929 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7929]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7929]: USER_START pid=7929 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7929]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7929]: USER_END pid=7929 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7929]: CRED_DISP pid=7929 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7932]: USER_AUTH pid=7932 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7932]: USER_ACCT pid=7932 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7932]: (to steve) root on none
May 18 15:25:51 steve-main audit[7932]: CRED_ACQ pid=7932 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7932]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7932]: USER_START pid=7932 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7932]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7932]: USER_END pid=7932 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7932]: CRED_DISP pid=7932 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7935]: USER_AUTH pid=7935 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7935]: USER_ACCT pid=7935 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7935]: (to steve) root on none
May 18 15:25:51 steve-main audit[7935]: CRED_ACQ pid=7935 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7935]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7935]: USER_START pid=7935 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7935]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7935]: USER_END pid=7935 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7935]: CRED_DISP pid=7935 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7938]: USER_AUTH pid=7938 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7938]: USER_ACCT pid=7938 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7938]: (to steve) root on none
May 18 15:25:51 steve-main audit[7938]: CRED_ACQ pid=7938 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7938]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7938]: USER_START pid=7938 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7938]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7938]: USER_END pid=7938 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7938]: CRED_DISP pid=7938 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7941]: USER_AUTH pid=7941 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7941]: USER_ACCT pid=7941 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7941]: (to steve) root on none
May 18 15:25:51 steve-main audit[7941]: CRED_ACQ pid=7941 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7941]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7941]: USER_START pid=7941 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7941]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7941]: USER_END pid=7941 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7941]: CRED_DISP pid=7941 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7944]: USER_AUTH pid=7944 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7944]: USER_ACCT pid=7944 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7944]: (to steve) root on none
May 18 15:25:51 steve-main audit[7944]: CRED_ACQ pid=7944 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7944]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7944]: USER_START pid=7944 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7944]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7944]: USER_END pid=7944 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7944]: CRED_DISP pid=7944 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7947]: USER_AUTH pid=7947 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7947]: USER_ACCT pid=7947 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7947]: (to steve) root on none
May 18 15:25:51 steve-main audit[7947]: CRED_ACQ pid=7947 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7947]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7947]: USER_START pid=7947 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7947]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7947]: USER_END pid=7947 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7947]: CRED_DISP pid=7947 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7950]: USER_AUTH pid=7950 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7950]: USER_ACCT pid=7950 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7950]: (to steve) root on none
May 18 15:25:51 steve-main audit[7950]: CRED_ACQ pid=7950 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7950]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7950]: USER_START pid=7950 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7950]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7950]: USER_END pid=7950 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7950]: CRED_DISP pid=7950 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7953]: USER_AUTH pid=7953 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7953]: USER_ACCT pid=7953 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7953]: (to steve) root on none
May 18 15:25:51 steve-main audit[7953]: CRED_ACQ pid=7953 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7953]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7953]: USER_START pid=7953 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7953]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7953]: USER_END pid=7953 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7953]: CRED_DISP pid=7953 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7956]: USER_AUTH pid=7956 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7956]: USER_ACCT pid=7956 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7956]: (to steve) root on none
May 18 15:25:51 steve-main audit[7956]: CRED_ACQ pid=7956 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7956]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:51 steve-main audit[7956]: USER_START pid=7956 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main su[7956]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:51 steve-main audit[7956]: USER_END pid=7956 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:51 steve-main audit[7956]: CRED_DISP pid=7956 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8107]: USER_AUTH pid=8107 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8107]: USER_ACCT pid=8107 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8107]: (to steve) root on none
May 18 15:25:52 steve-main audit[8107]: CRED_ACQ pid=8107 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8107]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8107]: USER_START pid=8107 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8107]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8107]: USER_END pid=8107 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8107]: CRED_DISP pid=8107 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8110]: USER_AUTH pid=8110 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8110]: USER_ACCT pid=8110 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8110]: (to steve) root on none
May 18 15:25:52 steve-main audit[8110]: CRED_ACQ pid=8110 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8110]: USER_START pid=8110 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8110]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main su[8110]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8110]: USER_END pid=8110 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8110]: CRED_DISP pid=8110 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8113]: USER_AUTH pid=8113 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8113]: USER_ACCT pid=8113 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8113]: (to steve) root on none
May 18 15:25:52 steve-main audit[8113]: CRED_ACQ pid=8113 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8113]: USER_START pid=8113 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8113]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main su[8113]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8113]: USER_END pid=8113 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8113]: CRED_DISP pid=8113 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8116]: USER_AUTH pid=8116 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8116]: USER_ACCT pid=8116 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8116]: (to steve) root on none
May 18 15:25:52 steve-main audit[8116]: CRED_ACQ pid=8116 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8116]: USER_START pid=8116 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8116]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main su[8116]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8116]: USER_END pid=8116 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8116]: CRED_DISP pid=8116 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8120]: USER_AUTH pid=8120 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8120]: USER_ACCT pid=8120 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8120]: (to steve) root on none
May 18 15:25:52 steve-main audit[8120]: CRED_ACQ pid=8120 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8120]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8120]: USER_START pid=8120 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8120]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8120]: USER_END pid=8120 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8120]: CRED_DISP pid=8120 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8123]: USER_AUTH pid=8123 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8123]: USER_ACCT pid=8123 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8123]: (to steve) root on none
May 18 15:25:52 steve-main audit[8123]: CRED_ACQ pid=8123 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8123]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8123]: USER_START pid=8123 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8123]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8123]: USER_END pid=8123 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8123]: CRED_DISP pid=8123 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8126]: USER_AUTH pid=8126 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8126]: USER_ACCT pid=8126 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8126]: (to steve) root on none
May 18 15:25:52 steve-main audit[8126]: CRED_ACQ pid=8126 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8126]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8126]: USER_START pid=8126 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8126]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8126]: USER_END pid=8126 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8126]: CRED_DISP pid=8126 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8129]: USER_AUTH pid=8129 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8129]: USER_ACCT pid=8129 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8129]: (to steve) root on none
May 18 15:25:52 steve-main audit[8129]: CRED_ACQ pid=8129 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8129]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8129]: USER_START pid=8129 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8129]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8129]: USER_END pid=8129 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8129]: CRED_DISP pid=8129 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8132]: USER_AUTH pid=8132 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8132]: USER_ACCT pid=8132 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8132]: (to steve) root on none
May 18 15:25:52 steve-main audit[8132]: CRED_ACQ pid=8132 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8132]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8132]: USER_START pid=8132 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8132]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8132]: USER_END pid=8132 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8132]: CRED_DISP pid=8132 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8135]: USER_AUTH pid=8135 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8135]: USER_ACCT pid=8135 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8135]: (to steve) root on none
May 18 15:25:52 steve-main audit[8135]: CRED_ACQ pid=8135 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8135]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8135]: USER_START pid=8135 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8135]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8135]: USER_END pid=8135 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8135]: CRED_DISP pid=8135 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8138]: USER_AUTH pid=8138 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8138]: USER_ACCT pid=8138 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8138]: (to steve) root on none
May 18 15:25:52 steve-main audit[8138]: CRED_ACQ pid=8138 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8138]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8138]: USER_START pid=8138 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8138]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8138]: USER_END pid=8138 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8138]: CRED_DISP pid=8138 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8141]: USER_AUTH pid=8141 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8141]: USER_ACCT pid=8141 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8141]: (to steve) root on none
May 18 15:25:52 steve-main audit[8141]: CRED_ACQ pid=8141 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8141]: USER_START pid=8141 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8141]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main su[8141]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8141]: USER_END pid=8141 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8141]: CRED_DISP pid=8141 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8144]: USER_AUTH pid=8144 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8144]: USER_ACCT pid=8144 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8144]: (to steve) root on none
May 18 15:25:52 steve-main audit[8144]: CRED_ACQ pid=8144 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8144]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8144]: USER_START pid=8144 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8144]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8144]: USER_END pid=8144 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8144]: CRED_DISP pid=8144 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8147]: USER_AUTH pid=8147 uid=0 auid=1000 ses=2 msg='op=PAM:authentication grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8147]: USER_ACCT pid=8147 uid=0 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8147]: (to steve) root on none
May 18 15:25:52 steve-main audit[8147]: CRED_ACQ pid=8147 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8147]: pam_unix(su-l:session): session opened for user steve(uid=1000) by (uid=0)
May 18 15:25:52 steve-main audit[8147]: USER_START pid=8147 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main su[8147]: pam_unix(su-l:session): session closed for user steve
May 18 15:25:52 steve-main audit[8147]: USER_END pid=8147 uid=0 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_unix acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:25:52 steve-main audit[8147]: CRED_DISP pid=8147 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_rootok acct="steve" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
May 18 15:26:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/4, but it's already registered
May 18 15:26:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/18, but it's already registered
May 18 15:26:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/24, but it's already registered
May 18 15:26:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/19, but it's already registered
May 18 15:26:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/30, but it's already registered
May 18 15:28:56 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 49369, resource id: 94371858, major code: 15 (QueryTree), minor code: 0
May 18 15:29:35 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 53108, resource id: 88080391, major code: 20 (GetProperty), minor code: 0
May 18 15:29:35 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 53109, resource id: 88080391, major code: 20 (GetProperty), minor code: 0
May 18 15:29:35 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 53111, resource id: 88080391, major code: 20 (GetProperty), minor code: 0
May 18 15:29:35 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 53112, resource id: 88080391, major code: 20 (GetProperty), minor code: 0
May 18 15:29:35 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 53113, resource id: 88080391, major code: 15 (QueryTree), minor code: 0
May 18 15:31:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/4, but it's already registered
May 18 15:31:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/19, but it's already registered
May 18 15:31:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/18, but it's already registered
May 18 15:31:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/24, but it's already registered
May 18 15:31:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/30, but it's already registered
May 18 15:31:31 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 4048, resource id: 88080390, major code: 18 (ChangeProperty), minor code: 0
May 18 15:36:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/4, but it's already registered
May 18 15:36:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/18, but it's already registered
May 18 15:36:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/19, but it's already registered
May 18 15:36:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/24, but it's already registered
May 18 15:36:29 steve-main gnome-keyring-daemon[774]: asked to register item /org/freedesktop/secrets/collection/Default_5fkeyring/30, but it's already registered
May 18 15:39:04 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 2161, resource id: 60817452, major code: 15 (QueryTree), minor code: 0
May 18 15:39:07 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 3833, resource id: 4194310, major code: 18 (ChangeProperty), minor code: 0
May 18 15:39:08 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 9 (BadDrawable), sequence: 4400, resource id: 41943202, major code: 14 (GetGeometry), minor code: 0
May 18 15:39:08 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 9 (BadDrawable), sequence: 4401, resource id: 41943202, major code: 14 (GetGeometry), minor code: 0
May 18 15:39:08 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 9 (BadDrawable), sequence: 4457, resource id: 41943204, major code: 73 (GetImage), minor code: 0
May 18 15:39:09 steve-main dbus-daemon[786]: [session uid=1000 pid=786] Activating service name='org.kde.LogoutPrompt' requested by ':1.22' (uid=1000 pid=901 comm="/usr/bin/plasmashell")
May 18 15:39:09 steve-main dbus-daemon[786]: [session uid=1000 pid=786] Successfully activated service 'org.kde.LogoutPrompt'
May 18 15:39:13 steve-main dbus-daemon[786]: [session uid=1000 pid=786] Activating service name='org.kde.Shutdown' requested by ':1.103' (uid=1000 pid=8515 comm="/usr/lib/ksmserver-logout-greeter")
May 18 15:39:13 steve-main dbus-daemon[786]: [session uid=1000 pid=786] Successfully activated service 'org.kde.Shutdown'
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7843, resource id: 4194321, major code: 15 (QueryTree), minor code: 0
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7937, resource id: 10485766, major code: 18 (ChangeProperty), minor code: 0
May 18 15:39:13 steve-main polkit-kde-authentication-agent-1[893]: Destroying listener
May 18 15:39:13 steve-main polkit-kde-authentication-agent-1[893]: Removing listener  PolkitQt1::Agent::Listener(0x5607f0a224c0)
May 18 15:39:13 steve-main kded5[823]: Service  ":1.43" unregistered
May 18 15:39:13 steve-main polkitd[620]: Unregistered Authentication Agent for unix-session:2 (system bus name :1.43, object path /org/kde/PolicyKit1/AuthenticationAgent, locale en_GB.UTF-8)
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7941, resource id: 46137349, major code: 18 (ChangeProperty), minor code: 0
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7945, resource id: 58720261, major code: 18 (ChangeProperty), minor code: 0
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7949, resource id: 37748761, major code: 18 (ChangeProperty), minor code: 0
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7953, resource id: 4194335, major code: 18 (ChangeProperty), minor code: 0
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7957, resource id: 35651589, major code: 18 (ChangeProperty), minor code: 0
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:198: TypeError: Cannot read property 'action' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:192: TypeError: Cannot read property 'action' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:20: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:33: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:34: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:63: TypeError: Cannot read property 'pluginName' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:65: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:66: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:67: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:68: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:69: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:20: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:21: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:22: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:23: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:198: TypeError: Cannot read property 'action' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:192: TypeError: Cannot read property 'action' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:20: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:33: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.desktoptoolbox/contents/ui/ToolBoxContent.qml:34: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:63: TypeError: Cannot read property 'pluginName' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:65: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:66: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:67: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:68: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:69: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:20: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:21: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:22: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/wallpapers/org.kde.image/contents/ui/main.qml:23: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.paneltoolbox/contents/ui/main.qml:18: TypeError: Cannot read property 'formFactor' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.paneltoolbox/contents/ui/main.qml:90: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.paneltoolbox/contents/ui/main.qml:35: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/packages/org.kde.paneltoolbox/contents/ui/main.qml:24: TypeError: Cannot read property 'editMode' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:98: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:99: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:90: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:26: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:71: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:60: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:65: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/Tooltip.qml:86: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.digitalclock/contents/ui/main.qml:42: TypeError: Cannot read property 'compactRepresentationItem' of null
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7963, resource id: 44040197, major code: 18 (ChangeProperty), minor code: 0
May 18 15:39:13 steve-main kwin_x11[826]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 7964, resource id: 41943072, major code: 15 (QueryTree), minor code: 0
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:23: TypeError: Cannot read property 'pluginName' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:154: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:129: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:70: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:71: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:72: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:43: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/MenuRepresentation.qml:0: ReferenceError: plasmoid is not defined
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:79: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:80: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:81: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.kicker/contents/ui/main.qml:82: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:24: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:244: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:250: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:256: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.devicenotifier/contents/ui/devicenotifier.qml:264: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.notifications/contents/ui/main.qml:141: TypeError: Cannot read property 'nativeInterface' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.notifications/contents/ui/global/Globals.qml:65:5: Unable to assign [undefined] to QObject*
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.notifications/contents/ui/global/Globals.qml:162: TypeError: Cannot read property 'nativeInterface' of null
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.kdeconnect/contents/ui/main.qml:38: TypeError: Cannot read property 'formFactor' of null
May 18 15:39:13 steve-main dbus-daemon[786]: [session uid=1000 pid=786] Activating service name='org.kde.kdeconnect' requested by ':1.22' (uid=1000 pid=901 comm="/usr/bin/plasmashell")
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.volume/contents/ui/main.qml:25: TypeError: Cannot read property 'configuration' of null
May 18 15:39:13 steve-main plasmashell[901]: libkcups: Create-Printer-Subscriptions last error: 1282 Bad file descriptor
May 18 15:39:13 steve-main plasmashell[901]: libkcups: Request failed 1282 -1
May 18 15:39:13 steve-main plasmashell[901]: libkcups: Create-Printer-Subscriptions last error: 1282 Bad file descriptor
May 18 15:39:13 steve-main plasmashell[901]: libkcups: Request failed 1282 -1
May 18 15:39:13 steve-main plasmashell[901]: file:///usr/share/plasma/plasmoids/org.kde.plasma.networkmanagement/contents/ui/main.qml:69: TypeError: Cannot read property 'expanded' of null
May 18 15:39:13 steve-main kwin_x11[826]: QMetaProperty::read: Unable to handle unregistered datatype 'KWin::SessionState' for property 'KWin::EffectsHandlerImplX11::sessionState'
May 18 15:39:13 steve-main kwin_x11[826]: QMetaProperty::read: Unable to handle unregistered datatype 'KWin::SessionState' for property 'KWin::EffectsHandlerImplX11::sessionState'
May 18 15:39:13 steve-main systemd-logind[615]: System is powering down.
May 18 15:39:13 steve-main kded5[823]: QDBusAbstractAdaptor: Cannot relay signal KDEDModule::moduleDeleted(KDEDModule*): Pointers are not supported: KDEDModule*