---- time->Sun Aug 10 00:42:38 2025 type=PROCTITLE msg=audit(1754800958.161:6480): proctitle=636572747574696C002D4E002D640073716C3A2F6574632F69707365632E64002D2D656D7074792D70617373776F7264 type=SYSCALL msg=audit(1754800958.161:6480): arch=c000003e syscall=83 success=no exit=-13 a0=cbce30 a1=1c0 a2=f a3=6898233e items=0 ppid=16769 pid=16774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="certutil" exe="/usr/bin/certutil" subj=system_u:system_r:ipsec_mgmt_t:s0 key=(null) type=AVC msg=audit(1754800958.161:6480): avc: denied { create } for pid=16774 comm="certutil" name="dbTemp.gE89dc" scontext=system_u:system_r:ipsec_mgmt_t:s0 tcontext=system_u:object_r:ipsec_key_file_t:s0 tclass=dir permissive=0 ---- time->Sun Aug 10 00:42:38 2025 type=PROCTITLE msg=audit(1754800958.297:6481): proctitle=2F7573722F6C6962657865632F69707365632F706C75746F002D2D6C65616B2D646574656374697665002D2D636F6E666967002F6574632F69707365632E636F6E66002D2D6E6F666F726B type=SYSCALL msg=audit(1754800958.297:6481): arch=c000003e syscall=83 success=no exit=-13 a0=55ddc36f2de0 a1=1c0 a2=f a3=6898233e items=0 ppid=1 pid=16790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pluto" exe="/usr/libexec/ipsec/pluto" subj=system_u:system_r:ipsec_t:s0 key=(null) type=AVC msg=audit(1754800958.297:6481): avc: denied { create } for pid=16790 comm="pluto" name="dbTemp.ERBaSp" scontext=system_u:system_r:ipsec_t:s0 tcontext=system_u:object_r:ipsec_key_file_t:s0 tclass=dir permissive=0 ---- time->Sun Aug 10 00:42:42 2025 type=PROCTITLE msg=audit(1754800962.125:6613): proctitle=2F7573722F6C6962657865632F69707365632F706C75746F002D2D6C65616B2D646574656374697665002D2D636F6E666967002F6574632F69707365632E636F6E66002D2D6E6F666F726B type=SYSCALL msg=audit(1754800962.125:6613): arch=c000003e syscall=83 success=no exit=-13 a0=560172823de0 a1=1c0 a2=f a3=68982342 items=0 ppid=1 pid=17360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pluto" exe="/usr/libexec/ipsec/pluto" subj=system_u:system_r:ipsec_t:s0 key=(null) type=AVC msg=audit(1754800962.125:6613): avc: denied { create } for pid=17360 comm="pluto" name="dbTemp.sWLfcm" scontext=system_u:system_r:ipsec_t:s0 tcontext=system_u:object_r:ipsec_key_file_t:s0 tclass=dir permissive=0