Nov 18 17:55:55 dom0 systemd-logind[1725]: New session c1 of user lightdm. Nov 18 17:55:55 dom0 systemd[1]: Finished user-runtime-dir@993.service - User Runtime Directory /run/user/993. Nov 18 17:55:55 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user-runtime-dir@993 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:55:55 dom0 systemd[1]: Starting user@993.service - User Manager for UID 993... Nov 18 17:55:55 dom0 (systemd)[2230]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: cannot open shared object file: No such file or directory Nov 18 17:55:55 dom0 (systemd)[2230]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:55:55 dom0 dbus-broker-launch[1711]: Activation request for 'org.freedesktop.home1' failed: The systemd unit 'dbus-org.freedesktop.home1.service' could not be found. Nov 18 17:55:55 dom0 (systemd)[2230]: pam_systemd_home(systemd-user:account): systemd-homed is not available: Could not activate remote peer: activation request failed: unknown unit. Nov 18 17:55:55 dom0 audit[2230]: USER_ACCT pid=2230 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="lightdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:55:55 dom0 audit[2230]: CRED_ACQ pid=2230 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=? acct="lightdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 18 17:55:55 dom0 audit[2230]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf8bf7ef0 a2=3 a3=7ffdf8bf7c05 items=0 ppid=1 pid=2230 auid=993 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="(systemd)" exe="/usr/lib/systemd/systemd" key=(null) Nov 18 17:55:55 dom0 audit: PROCTITLE proctitle="(systemd)" Nov 18 17:55:55 dom0 (systemd)[2230]: pam_unix(systemd-user:session): session opened for user lightdm(uid=993) by (uid=0) Nov 18 17:55:55 dom0 audit[2230]: USER_START pid=2230 uid=0 auid=993 ses=1 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_namespace,pam_systemd_home,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="lightdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:55:55 dom0 kernel: loop4: detected capacity change from 0 to 41943040 Nov 18 17:55:55 dom0 kernel: loop5: detected capacity change from 0 to 4194304 Nov 18 17:55:55 dom0 kernel: loop6: detected capacity change from 0 to 25165824 Nov 18 17:55:55 dom0 kernel: loop7: detected capacity change from 0 to 1181368 Nov 18 17:55:55 dom0 systemd[2230]: Queued start job for default target default.target. Nov 18 17:55:55 dom0 systemd[2230]: Created slice app.slice - User Application Slice. Nov 18 17:55:55 dom0 systemd[2230]: grub-boot-success.timer - Mark boot as successful after the user session has run 2 minutes was skipped because of a failed condition check (ConditionUser=!@system). Nov 18 17:55:55 dom0 systemd[2230]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Nov 18 17:55:55 dom0 systemd[2230]: Reached target paths.target - Paths. Nov 18 17:55:55 dom0 systemd[2230]: Reached target timers.target - Timers. Nov 18 17:55:55 dom0 systemd[2230]: Starting dbus.socket - D-Bus User Message Bus Socket... Nov 18 17:55:55 dom0 systemd[2230]: Listening on pulseaudio.socket - Sound System. Nov 18 17:55:55 dom0 systemd[2230]: Starting systemd-tmpfiles-setup.service - Create User's Volatile Files and Directories... Nov 18 17:55:55 dom0 systemd[2230]: Finished systemd-tmpfiles-setup.service - Create User's Volatile Files and Directories. Nov 18 17:55:55 dom0 systemd[2230]: Listening on dbus.socket - D-Bus User Message Bus Socket. Nov 18 17:55:55 dom0 systemd[2230]: Reached target sockets.target - Sockets. Nov 18 17:55:55 dom0 systemd[2230]: Reached target basic.target - Basic System. Nov 18 17:55:55 dom0 systemd[2230]: Reached target default.target - Main User Target. Nov 18 17:55:55 dom0 systemd[2230]: Startup finished in 173ms. Nov 18 17:55:55 dom0 systemd[1]: Started user@993.service - User Manager for UID 993. Nov 18 17:55:55 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@993 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:55:55 dom0 systemd[1]: Started session-c1.scope - Session c1 of User lightdm. Nov 18 17:55:55 dom0 audit[2226]: USER_START pid=2226 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_unix,pam_systemd acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:55:55 dom0 kernel: pciback 0000:09:00.0: xen_pciback: enabling permissive mode configuration space accesses! Nov 18 17:55:55 dom0 kernel: pciback 0000:09:00.0: xen_pciback: permissive mode is potentially unsafe! Nov 18 17:55:55 dom0 kernel: pciback 0000:09:00.0: xen_pciback: vpci: assign to virtual slot 0 Nov 18 17:55:55 dom0 kernel: pciback 0000:09:00.0: registering for 2 Nov 18 17:55:55 dom0 systemd[2230]: Created slice session.slice - User Core Session Slice. Nov 18 17:55:55 dom0 systemd[2230]: Starting dbus-broker.service - D-Bus User Message Bus... Nov 18 17:55:55 dom0 dbus-broker-launch[2266]: Service file '/usr/share/dbus-1/services/org.xfce.Thunar.FileManager1.service' is not named after the D-Bus name 'org.freedesktop.FileManager1'. Nov 18 17:55:55 dom0 dbus-broker-launch[2266]: Service file '/usr/share/dbus-1/services/dbus-qubes-app-menu.service' is not named after the D-Bus name 'org.qubesos.appmenu'. Nov 18 17:55:55 dom0 dbus-broker-launch[2266]: Policy to allow eavesdropping in /usr/share/dbus-1/session.conf +31: Eavesdropping is deprecated and ignored Nov 18 17:55:55 dom0 dbus-broker-launch[2266]: Policy to allow eavesdropping in /usr/share/dbus-1/session.conf +33: Eavesdropping is deprecated and ignored Nov 18 17:55:55 dom0 systemd[2230]: Started dbus-broker.service - D-Bus User Message Bus. Nov 18 17:55:55 dom0 dbus-broker-launch[2266]: Ready Nov 18 17:55:55 dom0 systemd[2230]: Starting at-spi-dbus-bus.service - Accessibility services bus... Nov 18 17:55:55 dom0 systemd[2230]: Started at-spi-dbus-bus.service - Accessibility services bus. Nov 18 17:55:55 dom0 at-spi-bus-launcher[2273]: Policy to allow eavesdropping in /usr/share/defaults/at-spi2/accessibility.conf +15: Eavesdropping is deprecated and ignored Nov 18 17:55:55 dom0 at-spi-bus-launcher[2273]: Policy to allow eavesdropping in /usr/share/defaults/at-spi2/accessibility.conf +17: Eavesdropping is deprecated and ignored Nov 18 17:55:55 dom0 dbus-broker-launch[2273]: Ready Nov 18 17:55:55 dom0 kernel: xen: registering gsi 35 triggering 0 polarity 1 Nov 18 17:55:55 dom0 kernel: Already setup the GSI :35 Nov 18 17:55:55 dom0 kernel: xen: registering gsi 35 triggering 0 polarity 1 Nov 18 17:55:55 dom0 kernel: Already setup the GSI :35 Nov 18 17:55:55 dom0 kernel: xen: registering gsi 35 triggering 0 polarity 1 Nov 18 17:55:55 dom0 kernel: Already setup the GSI :35 Nov 18 17:55:55 dom0 kernel: xen: registering gsi 35 triggering 0 polarity 1 Nov 18 17:55:55 dom0 kernel: Already setup the GSI :35 Nov 18 17:55:55 dom0 kernel: xen: registering gsi 35 triggering 0 polarity 1 Nov 18 17:55:55 dom0 kernel: Already setup the GSI :35 Nov 18 17:55:55 dom0 kernel: xen: registering gsi 35 triggering 0 polarity 1 Nov 18 17:55:55 dom0 kernel: Already setup the GSI :35 Nov 18 17:55:55 dom0 systemd[2230]: Starting gvfs-daemon.service - Virtual filesystem service... Nov 18 17:55:55 dom0 kernel: xen-blkback: backend/vbd/2/51712: using 1 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:55:55 dom0 kernel: xen-blkback: backend/vbd/2/51728: using 1 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:55:55 dom0 kernel: xen-blkback: backend/vbd/2/51744: using 1 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:55:55 dom0 kernel: xen-blkback: backend/vbd/2/51760: using 1 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:55:55 dom0 systemd[2230]: Started gvfs-daemon.service - Virtual filesystem service. Nov 18 17:55:56 dom0 qubesd[1724]: vm.sys-net: Setting Qubes DB info for the VM Nov 18 17:55:56 dom0 qubesd[1724]: vm.sys-net: Starting Qubes DB Nov 18 17:55:56 dom0 audit[2304]: CRED_ACQ pid=2304 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:55:56 dom0 runuser[2304]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:55:56 dom0 audit[2304]: USER_START pid=2304 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:55:56 dom0 runuser[2304]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:55:56 dom0 audit[2304]: USER_END pid=2304 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:55:56 dom0 audit[2304]: CRED_DISP pid=2304 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:55:56 dom0 qubesd[1724]: vm.sys-net: Activating the sys-net VM Nov 18 17:55:56 dom0 audit[2308]: CRED_ACQ pid=2308 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:55:56 dom0 runuser[2308]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:55:56 dom0 audit[2308]: USER_START pid=2308 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:55:56 dom0 systemd[2230]: Created slice app-dbus\x2d:1.4\x2dorg.a11y.atspi.Registry.slice - Slice /app/dbus-:1.4-org.a11y.atspi.Registry. Nov 18 17:55:56 dom0 lightdm[2317]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: cannot open shared object file: No such file or directory Nov 18 17:55:56 dom0 lightdm[2317]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:55:56 dom0 systemd[2230]: Started dbus-:1.4-org.a11y.atspi.Registry@0.service. Nov 18 17:55:57 dom0 at-spi2-registryd[2318]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry Nov 18 17:55:59 dom0 kernel: xen-blkback: backend/vbd/1/51712: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:55:59 dom0 kernel: xen-blkback: backend/vbd/1/51728: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:55:59 dom0 kernel: xen-blkback: backend/vbd/1/51744: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:55:59 dom0 kernel: xen-blkback: backend/vbd/1/51760: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:01 dom0 runuser[2308]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:01 dom0 audit[2308]: USER_END pid=2308 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:01 dom0 audit[2308]: CRED_DISP pid=2308 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:01 dom0 kernel: kauditd_printk_skb: 17 callbacks suppressed Nov 18 17:56:01 dom0 kernel: audit: type=1106 audit(1700297761.899:231): pid=2308 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:01 dom0 kernel: audit: type=1104 audit(1700297761.899:232): pid=2308 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:01 dom0 qubesd[1724]: Created sparse file: '/var/lib/qubes/appvms/sys-firewall/volatile-dirty.img~j86m0xsh' Nov 18 17:56:01 dom0 qubesd[1724]: Hardlinked file: '/var/lib/qubes/vm-templates/debian-11/root.img' -> '/var/lib/qubes/appvms/sys-firewall/root.img' Nov 18 17:56:01 dom0 qubesd[1724]: Hardlinked file: '/var/lib/qubes/appvms/default-dvm/private.img' -> '/var/lib/qubes/appvms/sys-firewall/private.img' Nov 18 17:56:01 dom0 qubesd[1724]: Reflinked file: '/var/lib/qubes/appvms/sys-firewall/private.img' -> '/var/lib/qubes/appvms/sys-firewall/private-dirty.img~1c7v1c69' Nov 18 17:56:01 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/sys-firewall/volatile-dirty.img~j86m0xsh' -> '/var/lib/qubes/appvms/sys-firewall/volatile-dirty.img' Nov 18 17:56:01 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/sys-firewall/private-dirty.img~1c7v1c69' -> '/var/lib/qubes/appvms/sys-firewall/private-dirty.img' Nov 18 17:56:01 dom0 systemd[1]: Finished qubes-vm@sys-net.service - Start Qubes VM sys-net. Nov 18 17:56:01 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-vm@sys-net comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:01 dom0 kernel: audit: type=1130 audit(1700297761.924:233): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-vm@sys-net comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:02 dom0 audit[2317]: USER_AUTH pid=2317 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_usertype,pam_localuser,pam_unix acct="flo_y" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 kernel: audit: type=1100 audit(1700297762.707:234): pid=2317 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_usertype,pam_localuser,pam_unix acct="flo_y" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 audit[2317]: USER_ACCT pid=2317 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 kernel: audit: type=1101 audit(1700297762.708:235): pid=2317 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 systemd[1]: Stopping session-c1.scope - Session c1 of User lightdm... Nov 18 17:56:02 dom0 lightdm[2226]: pam_unix(lightdm-greeter:session): session closed for user lightdm Nov 18 17:56:02 dom0 audit[2226]: USER_END pid=2226 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_unix,pam_systemd acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 audit[2226]: CRED_DISP pid=2226 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_env,pam_permit acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 kernel: audit: type=1106 audit(1700297762.786:236): pid=2226 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_unix,pam_systemd acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 kernel: audit: type=1104 audit(1700297762.786:237): pid=2226 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_env,pam_permit acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 systemd[1]: session-c1.scope: Deactivated successfully. Nov 18 17:56:02 dom0 systemd[1]: Stopped session-c1.scope - Session c1 of User lightdm. Nov 18 17:56:02 dom0 systemd-logind[1725]: Removed session c1. Nov 18 17:56:02 dom0 audit[2317]: CRED_ACQ pid=2317 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_localuser,pam_unix acct="flo_y" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 audit[2317]: SYSCALL arch=c000003e syscall=1 success=yes exit=4 a0=8 a1=7ffe5eda39f0 a2=4 a3=7ffe5eda3704 items=0 ppid=1945 pid=2317 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="lightdm" exe="/usr/sbin/lightdm" key=(null) Nov 18 17:56:02 dom0 audit: PROCTITLE proctitle=6C69676874646D002D2D73657373696F6E2D6368696C64003133003230 Nov 18 17:56:02 dom0 kernel: audit: type=1103 audit(1700297762.791:238): pid=2317 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_localuser,pam_unix acct="flo_y" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 kernel: audit: type=1006 audit(1700297762.791:239): pid=2317 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1 Nov 18 17:56:02 dom0 kernel: audit: type=1300 audit(1700297762.791:239): arch=c000003e syscall=1 success=yes exit=4 a0=8 a1=7ffe5eda39f0 a2=4 a3=7ffe5eda3704 items=0 ppid=1945 pid=2317 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="lightdm" exe="/usr/sbin/lightdm" key=(null) Nov 18 17:56:02 dom0 systemd[1]: Created slice user-1000.slice - User Slice of UID 1000. Nov 18 17:56:02 dom0 systemd[1]: Starting user-runtime-dir@1000.service - User Runtime Directory /run/user/1000... Nov 18 17:56:02 dom0 systemd-logind[1725]: New session 2 of user flo_y. Nov 18 17:56:02 dom0 systemd[1]: Finished user-runtime-dir@1000.service - User Runtime Directory /run/user/1000. Nov 18 17:56:02 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:02 dom0 systemd[1]: Starting user@1000.service - User Manager for UID 1000... Nov 18 17:56:02 dom0 qubesd[1724]: Reflinked file: '/var/lib/qubes/appvms/sys-firewall/root.img' -> '/var/lib/qubes/appvms/sys-firewall/root-dirty.img~uz2l6pta' Nov 18 17:56:02 dom0 (systemd)[2348]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: cannot open shared object file: No such file or directory Nov 18 17:56:02 dom0 (systemd)[2348]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:02 dom0 (systemd)[2348]: pam_systemd_home(systemd-user:account): systemd-homed is not available: Could not activate remote peer: activation request failed: unknown unit. Nov 18 17:56:02 dom0 audit[2348]: USER_ACCT pid=2348 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="flo_y" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:02 dom0 audit[2348]: CRED_ACQ pid=2348 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=? acct="flo_y" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 18 17:56:02 dom0 audit[2348]: SYSCALL arch=c000003e syscall=1 success=yes exit=4 a0=8 a1=7ffdf8bf7ef0 a2=4 a3=7ffdf8bf7c04 items=0 ppid=1 pid=2348 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="(systemd)" exe="/usr/lib/systemd/systemd" key=(null) Nov 18 17:56:02 dom0 audit: PROCTITLE proctitle="(systemd)" Nov 18 17:56:02 dom0 (systemd)[2348]: pam_unix(systemd-user:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:02 dom0 audit[2348]: USER_START pid=2348 uid=0 auid=1000 ses=3 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_namespace,pam_systemd_home,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="flo_y" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:02 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/sys-firewall/root-dirty.img~uz2l6pta' -> '/var/lib/qubes/appvms/sys-firewall/root-dirty.img' Nov 18 17:56:02 dom0 systemd[2348]: Queued start job for default target default.target. Nov 18 17:56:02 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:02 dom0 systemd[2348]: Created slice app.slice - User Application Slice. Nov 18 17:56:02 dom0 systemd[2348]: Started grub-boot-success.timer - Mark boot as successful after the user session has run 2 minutes. Nov 18 17:56:02 dom0 systemd[2348]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Nov 18 17:56:02 dom0 systemd[2348]: Reached target paths.target - Paths. Nov 18 17:56:02 dom0 systemd[2348]: Reached target timers.target - Timers. Nov 18 17:56:02 dom0 systemd[2348]: Starting dbus.socket - D-Bus User Message Bus Socket... Nov 18 17:56:02 dom0 systemd[2348]: Listening on pulseaudio.socket - Sound System. Nov 18 17:56:02 dom0 systemd[2348]: Starting systemd-tmpfiles-setup.service - Create User's Volatile Files and Directories... Nov 18 17:56:02 dom0 systemd[2348]: Listening on dbus.socket - D-Bus User Message Bus Socket. Nov 18 17:56:02 dom0 systemd[2348]: Reached target sockets.target - Sockets. Nov 18 17:56:02 dom0 systemd[2348]: Finished systemd-tmpfiles-setup.service - Create User's Volatile Files and Directories. Nov 18 17:56:02 dom0 systemd[2348]: Reached target basic.target - Basic System. Nov 18 17:56:02 dom0 systemd[2348]: Reached target default.target - Main User Target. Nov 18 17:56:02 dom0 systemd[2348]: Startup finished in 87ms. Nov 18 17:56:02 dom0 systemd[1]: Started user@1000.service - User Manager for UID 1000. Nov 18 17:56:02 dom0 systemd[1]: Started session-2.scope - Session 2 of User flo_y. Nov 18 17:56:02 dom0 lightdm[2317]: pam_unix(lightdm:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:02 dom0 audit[2317]: USER_START pid=2317 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog,pam_umask,pam_lastlog acct="flo_y" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' Nov 18 17:56:02 dom0 audit[2317]: USER_LOGIN pid=2317 uid=0 auid=1000 ses=2 msg='op=login id=1000 exe="/usr/sbin/lightdm" hostname=dom0 addr=? terminal=/dev/tty1 res=success' Nov 18 17:56:03 dom0 systemd[2348]: Created slice session.slice - User Core Session Slice. Nov 18 17:56:03 dom0 systemd[2348]: Starting dbus-broker.service - D-Bus User Message Bus... Nov 18 17:56:03 dom0 dbus-broker-launch[2371]: Service file '/usr/share/dbus-1/services/org.xfce.Thunar.FileManager1.service' is not named after the D-Bus name 'org.freedesktop.FileManager1'. Nov 18 17:56:03 dom0 dbus-broker-launch[2371]: Service file '/usr/share/dbus-1/services/dbus-qubes-app-menu.service' is not named after the D-Bus name 'org.qubesos.appmenu'. Nov 18 17:56:03 dom0 dbus-broker-launch[2371]: Policy to allow eavesdropping in /usr/share/dbus-1/session.conf +31: Eavesdropping is deprecated and ignored Nov 18 17:56:03 dom0 dbus-broker-launch[2371]: Policy to allow eavesdropping in /usr/share/dbus-1/session.conf +33: Eavesdropping is deprecated and ignored Nov 18 17:56:03 dom0 systemd[2348]: Started dbus-broker.service - D-Bus User Message Bus. Nov 18 17:56:03 dom0 dbus-broker-launch[2371]: Ready Nov 18 17:56:03 dom0 audit: BPF prog-id=51 op=LOAD Nov 18 17:56:03 dom0 audit: BPF prog-id=52 op=LOAD Nov 18 17:56:03 dom0 audit: BPF prog-id=53 op=LOAD Nov 18 17:56:03 dom0 systemd[1]: Starting systemd-hostnamed.service - Hostname Service... Nov 18 17:56:03 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:03 dom0 systemd[1]: Started systemd-hostnamed.service - Hostname Service. Nov 18 17:56:03 dom0 systemd[2348]: Starting at-spi-dbus-bus.service - Accessibility services bus... Nov 18 17:56:03 dom0 systemd[2348]: Started at-spi-dbus-bus.service - Accessibility services bus. Nov 18 17:56:03 dom0 at-spi-bus-launcher[2410]: Policy to allow eavesdropping in /usr/share/defaults/at-spi2/accessibility.conf +15: Eavesdropping is deprecated and ignored Nov 18 17:56:03 dom0 at-spi-bus-launcher[2410]: Policy to allow eavesdropping in /usr/share/defaults/at-spi2/accessibility.conf +17: Eavesdropping is deprecated and ignored Nov 18 17:56:03 dom0 dbus-broker-launch[2410]: Ready Nov 18 17:56:03 dom0 systemd[2348]: Created slice app-dbus\x2d:1.2\x2dorg.xfce.Xfconf.slice - Slice /app/dbus-:1.2-org.xfce.Xfconf. Nov 18 17:56:03 dom0 systemd[2348]: Started dbus-:1.2-org.xfce.Xfconf@0.service. Nov 18 17:56:03 dom0 systemd[2348]: Created slice app-dbus\x2d:1.6\x2dorg.a11y.atspi.Registry.slice - Slice /app/dbus-:1.6-org.a11y.atspi.Registry. Nov 18 17:56:03 dom0 systemd[2348]: Started dbus-:1.6-org.a11y.atspi.Registry@0.service. Nov 18 17:56:03 dom0 at-spi2-registryd[2419]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry Nov 18 17:56:03 dom0 systemd[2348]: Starting gvfs-daemon.service - Virtual filesystem service... Nov 18 17:56:03 dom0 systemd[2348]: Started gvfs-daemon.service - Virtual filesystem service. Nov 18 17:56:04 dom0 systemd[1]: /usr/lib/systemd/system/qubes-suspend.service:9: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether. Nov 18 17:56:04 dom0 kernel: loop8: detected capacity change from 0 to 41943040 Nov 18 17:56:04 dom0 kernel: loop9: detected capacity change from 0 to 4194304 Nov 18 17:56:04 dom0 kernel: loop10: detected capacity change from 0 to 25165824 Nov 18 17:56:04 dom0 kernel: loop11: detected capacity change from 0 to 1181368 Nov 18 17:56:04 dom0 systemd[2348]: Starting pulseaudio.service - Sound Service... Nov 18 17:56:04 dom0 qubesd[1724]: vm.sys-firewall: Setting Qubes DB info for the VM Nov 18 17:56:04 dom0 qubesd[1724]: vm.sys-firewall: Starting Qubes DB Nov 18 17:56:04 dom0 audit[2548]: CRED_ACQ pid=2548 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 runuser[2548]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:04 dom0 audit[2548]: USER_START pid=2548 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 runuser[2548]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:04 dom0 audit[2548]: USER_END pid=2548 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2548]: CRED_DISP pid=2548 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 systemd[1]: Starting rtkit-daemon.service - RealtimeKit Scheduling Policy Service... Nov 18 17:56:04 dom0 qubesd[1724]: vm.sys-firewall: Activating the sys-firewall VM Nov 18 17:56:04 dom0 systemd[2348]: Created slice app-qubes\x2dwidget.slice - Slice /app/qubes-widget. Nov 18 17:56:04 dom0 systemd[2348]: Started qubes-widget@qui-clipboard.service - Qubes Widget service. Nov 18 17:56:04 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rtkit-daemon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2571]: CRED_ACQ pid=2571 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2571]: USER_START pid=2571 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully called chroot. Nov 18 17:56:04 dom0 systemd[1]: Started rtkit-daemon.service - RealtimeKit Scheduling Policy Service. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully dropped privileges. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully limited resources. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Canary thread running. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Watchdog thread running. Nov 18 17:56:04 dom0 runuser[2571]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Running. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully made thread 2518 of process 2518 (/usr/bin/pulseaudio) owned by '1000' high priority at nice level -11. Nov 18 17:56:04 dom0 systemd[2348]: Starting qubes-app-menu.service - Qubes Application Menu... Nov 18 17:56:04 dom0 systemd[2348]: Started qubes-widget@qui-devices.service - Qubes Widget service. Nov 18 17:56:04 dom0 polkitd[1758]: Registered Authentication Agent for unix-session:2 (system bus name :1.34 [/usr/libexec/xfce-polkit], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale ja_JP.utf8) Nov 18 17:56:04 dom0 systemd[2348]: Started qubes-widget@qui-disk-space.service - Qubes Widget service. Nov 18 17:56:04 dom0 systemd[2348]: Started qubes-widget@qui-domains.service - Qubes Widget service. Nov 18 17:56:04 dom0 systemd[2348]: Started qubes-widget@qui-updates.service - Qubes Widget service. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-2837 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-2837 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-2837 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-2837 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-2837 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: Disabling timer-based scheduling because running inside a VM. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully made thread 2613 of process 2518 (/usr/bin/pulseaudio) owned by '1000' RT at priority 5. Nov 18 17:56:04 dom0 pulseaudio[2518]: Disabling timer-based scheduling because running inside a VM. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully made thread 2616 of process 2518 (/usr/bin/pulseaudio) owned by '1000' RT at priority 5. Nov 18 17:56:04 dom0 pulseaudio[2518]: Disabling timer-based scheduling because running inside a VM. Nov 18 17:56:04 dom0 sudo[2615]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:04 dom0 sudo[2615]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:04 dom0 audit[2615]: USER_ACCT pid=2615 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2615]: USER_CMD pid=2615 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6B6579626F617264406576656E74382E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2615]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-keyboard@event8.service Nov 18 17:56:04 dom0 audit[2615]: CRED_REFR pid=2615 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully made thread 2618 of process 2518 (/usr/bin/pulseaudio) owned by '1000' RT at priority 5. Nov 18 17:56:04 dom0 sudo[2615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:04 dom0 audit[2615]: USER_START pid=2615 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-6337 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-6337 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-6337 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-6337 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 pulseaudio[2518]: The decibel volume range for element 'PCM' (-6337 dB - -6 dB) has negative maximum. Disabling the decibel range. Nov 18 17:56:04 dom0 kernel: snd_hda_intel 0000:0a:00.1: IRQ timing workaround is activated for card #1. Suggest a bigger bdl_pos_adj. Nov 18 17:56:04 dom0 systemd[1]: Started qubes-input-sender-keyboard@event8.service - Qubes input proxy sender (keyboard). Nov 18 17:56:04 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 qubes-input-sender[2620]: Device /dev/input/event8 is already in dom0 Nov 18 17:56:04 dom0 systemd[1]: qubes-input-sender-keyboard@event8.service: Deactivated successfully. Nov 18 17:56:04 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2615]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:04 dom0 audit[2615]: USER_END pid=2615 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2615]: CRED_DISP pid=2615 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 pulseaudio[2518]: Disabling timer-based scheduling because running inside a VM. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully made thread 2627 of process 2518 (/usr/bin/pulseaudio) owned by '1000' RT at priority 5. Nov 18 17:56:04 dom0 sudo[2630]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:04 dom0 sudo[2630]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:04 dom0 audit[2630]: USER_ACCT pid=2630 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2630]: USER_CMD pid=2630 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6D6F757365406576656E74372E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2630]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-mouse@event7.service Nov 18 17:56:04 dom0 audit[2630]: CRED_REFR pid=2630 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2630]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:04 dom0 audit[2630]: USER_START pid=2630 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 systemd[1]: Started qubes-input-sender-mouse@event7.service - Qubes input proxy sender (mouse). Nov 18 17:56:04 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-mouse@event7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 qubes-input-sender[2632]: Device /dev/input/event7 is already in dom0 Nov 18 17:56:04 dom0 systemd[1]: qubes-input-sender-mouse@event7.service: Deactivated successfully. Nov 18 17:56:04 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-mouse@event7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2630]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:04 dom0 audit[2630]: USER_END pid=2630 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2630]: CRED_DISP pid=2630 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2635]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:04 dom0 sudo[2635]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:04 dom0 audit[2635]: USER_ACCT pid=2635 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2635]: USER_CMD pid=2635 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6B6579626F617264406576656E74362E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2635]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-keyboard@event6.service Nov 18 17:56:04 dom0 sudo[2635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:04 dom0 audit[2635]: CRED_REFR pid=2635 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2635]: USER_START pid=2635 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 systemd[1]: Started qubes-input-sender-keyboard@event6.service - Qubes input proxy sender (keyboard). Nov 18 17:56:04 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 qubes-input-sender[2638]: Device /dev/input/event6 is already in dom0 Nov 18 17:56:04 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 systemd[1]: qubes-input-sender-keyboard@event6.service: Deactivated successfully. Nov 18 17:56:04 dom0 sudo[2635]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:04 dom0 audit[2635]: USER_END pid=2635 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2635]: CRED_DISP pid=2635 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2648]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:04 dom0 sudo[2648]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:04 dom0 audit[2648]: USER_ACCT pid=2648 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2648]: USER_CMD pid=2648 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6B6579626F617264406576656E74352E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2648]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-keyboard@event5.service Nov 18 17:56:04 dom0 audit[2648]: CRED_REFR pid=2648 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2648]: USER_START pid=2648 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:04 dom0 systemd[2348]: Started qubes-app-menu.service - Qubes Application Menu. Nov 18 17:56:04 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 systemd[1]: Started qubes-input-sender-keyboard@event5.service - Qubes input proxy sender (keyboard). Nov 18 17:56:04 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 qubes-input-sender[2664]: Device /dev/input/event5 is already in dom0 Nov 18 17:56:04 dom0 systemd[1]: qubes-input-sender-keyboard@event5.service: Deactivated successfully. Nov 18 17:56:04 dom0 sudo[2648]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:04 dom0 audit[2648]: USER_END pid=2648 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2648]: CRED_DISP pid=2648 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2675]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:04 dom0 sudo[2675]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:04 dom0 audit[2675]: USER_ACCT pid=2675 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2675]: USER_CMD pid=2675 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6B6579626F617264406576656E74342E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2675]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-keyboard@event4.service Nov 18 17:56:04 dom0 audit[2675]: CRED_REFR pid=2675 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2675]: USER_START pid=2675 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:04 dom0 pulseaudio[2518]: Disabling timer-based scheduling because running inside a VM. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully made thread 2686 of process 2518 (/usr/bin/pulseaudio) owned by '1000' RT at priority 5. Nov 18 17:56:04 dom0 pulseaudio[2518]: Disabling timer-based scheduling because running inside a VM. Nov 18 17:56:04 dom0 rtkit-daemon[2568]: Successfully made thread 2687 of process 2518 (/usr/bin/pulseaudio) owned by '1000' RT at priority 5. Nov 18 17:56:04 dom0 systemd[1]: Started qubes-input-sender-keyboard@event4.service - Qubes input proxy sender (keyboard). Nov 18 17:56:04 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 qubes-input-sender[2688]: Device /dev/input/event4 is already in dom0 Nov 18 17:56:04 dom0 audit[2675]: USER_END pid=2675 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2675]: CRED_DISP pid=2675 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2675]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:04 dom0 systemd[1]: qubes-input-sender-keyboard@event4.service: Deactivated successfully. Nov 18 17:56:04 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 pulseaudio[2518]: stat('/etc/pulse/default.pa.d'): No such file or directory Nov 18 17:56:04 dom0 sudo[2695]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:04 dom0 systemd[2348]: Started pulseaudio.service - Sound Service. Nov 18 17:56:04 dom0 sudo[2695]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:04 dom0 audit[2695]: USER_ACCT pid=2695 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2695]: USER_CMD pid=2695 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6B6579626F617264406576656E74332E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2695]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-keyboard@event3.service Nov 18 17:56:04 dom0 audit[2695]: CRED_REFR pid=2695 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 sudo[2695]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:04 dom0 audit[2695]: USER_START pid=2695 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 systemd[1]: Started qubes-input-sender-keyboard@event3.service - Qubes input proxy sender (keyboard). Nov 18 17:56:04 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 qubes-input-sender[2698]: Device /dev/input/event3 is already in dom0 Nov 18 17:56:04 dom0 systemd[1]: qubes-input-sender-keyboard@event3.service: Deactivated successfully. Nov 18 17:56:04 dom0 sudo[2695]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:04 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2695]: USER_END pid=2695 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:04 dom0 audit[2695]: CRED_DISP pid=2695 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2702]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:05 dom0 sudo[2702]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:05 dom0 audit[2702]: USER_ACCT pid=2702 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 audit[2702]: USER_CMD pid=2702 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6B6579626F617264406576656E74322E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2702]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-keyboard@event2.service Nov 18 17:56:05 dom0 audit[2702]: CRED_REFR pid=2702 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:05 dom0 audit[2702]: USER_START pid=2702 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 systemd[1]: Started qubes-input-sender-keyboard@event2.service - Qubes input proxy sender (keyboard). Nov 18 17:56:05 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2702]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:05 dom0 audit[2702]: USER_END pid=2702 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 audit[2702]: CRED_DISP pid=2702 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 qubes-input-sender[2704]: Device /dev/input/event2 is already in dom0 Nov 18 17:56:05 dom0 systemd[1]: qubes-input-sender-keyboard@event2.service: Deactivated successfully. Nov 18 17:56:05 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2707]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:05 dom0 sudo[2707]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:05 dom0 audit[2707]: USER_ACCT pid=2707 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 audit[2707]: USER_CMD pid=2707 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6B6579626F617264406576656E74312E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2707]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-keyboard@event1.service Nov 18 17:56:05 dom0 audit[2707]: CRED_REFR pid=2707 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:05 dom0 audit[2707]: USER_START pid=2707 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 systemd[1]: Started qubes-input-sender-keyboard@event1.service - Qubes input proxy sender (keyboard). Nov 18 17:56:05 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 qubes-input-sender[2710]: Device /dev/input/event1 is already in dom0 Nov 18 17:56:05 dom0 audit[2707]: USER_END pid=2707 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 audit[2707]: CRED_DISP pid=2707 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2707]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:05 dom0 systemd[1]: qubes-input-sender-keyboard@event1.service: Deactivated successfully. Nov 18 17:56:05 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2713]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: 共有オブジェクトファイルを開けません: そのようなファイルやディレクトリはありません Nov 18 17:56:05 dom0 sudo[2713]: PAM adding faulty module: /usr/lib64/security/pam_sss.so Nov 18 17:56:05 dom0 audit[2713]: USER_ACCT pid=2713 uid=1000 auid=1000 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="flo_y" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 audit[2713]: USER_CMD pid=2713 uid=1000 auid=1000 ses=2 msg='cwd="/home/flo_y" cmd=2F62696E2F73797374656D63746C202D2D6E6F2D626C6F636B2073746172742071756265732D696E7075742D73656E6465722D6B6579626F617264406576656E74302E73657276696365 exe="/usr/bin/sudo" terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2713]: flo_y : PWD=/home/flo_y ; USER=root ; COMMAND=/bin/systemctl --no-block start qubes-input-sender-keyboard@event0.service Nov 18 17:56:05 dom0 audit[2713]: CRED_REFR pid=2713 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Nov 18 17:56:05 dom0 audit[2713]: USER_START pid=2713 uid=1000 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 systemd[1]: Started qubes-input-sender-keyboard@event0.service - Qubes input proxy sender (keyboard). Nov 18 17:56:05 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 sudo[2713]: pam_unix(sudo:session): session closed for user root Nov 18 17:56:05 dom0 audit[2713]: USER_END pid=2713 uid=1000 auid=1000 ses=2 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 qubes-input-sender[2715]: Device /dev/input/event0 is already in dom0 Nov 18 17:56:05 dom0 audit[2713]: CRED_DISP pid=2713 uid=1000 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 18 17:56:05 dom0 systemd[1]: qubes-input-sender-keyboard@event0.service: Deactivated successfully. Nov 18 17:56:05 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-input-sender-keyboard@event0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:06 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.WindowIconUpdater+: sys-net -> @adminvm: allowed to dom0 Nov 18 17:56:08 dom0 kernel: xen-blkback: backend/vbd/3/51712: using 3 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:08 dom0 kernel: xen-blkback: backend/vbd/3/51728: using 3 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:08 dom0 kernel: xen-blkback: backend/vbd/3/51744: using 3 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:08 dom0 kernel: xen-blkback: backend/vbd/3/51760: using 3 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:11 dom0 runuser[2571]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:11 dom0 audit[2571]: USER_END pid=2571 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:11 dom0 kernel: kauditd_printk_skb: 94 callbacks suppressed Nov 18 17:56:11 dom0 kernel: audit: type=1106 audit(1700297771.022:331): pid=2571 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:11 dom0 kernel: audit: type=1104 audit(1700297771.022:332): pid=2571 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:11 dom0 audit[2571]: CRED_DISP pid=2571 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:11 dom0 qubesd[1724]: Created sparse file: '/var/lib/qubes/appvms/sys-whonix/volatile-dirty.img~uby21ns3' Nov 18 17:56:11 dom0 qubesd[1724]: Hardlinked file: '/var/lib/qubes/vm-templates/whonix-gw-16/root.img' -> '/var/lib/qubes/appvms/sys-whonix/root.img' Nov 18 17:56:11 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/sys-whonix/private-precache.img' -> '/var/lib/qubes/appvms/sys-whonix/private-dirty.img' Nov 18 17:56:11 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/sys-whonix/volatile-dirty.img~uby21ns3' -> '/var/lib/qubes/appvms/sys-whonix/volatile-dirty.img' Nov 18 17:56:11 dom0 systemd[1]: Finished qubes-vm@sys-firewall.service - Start Qubes VM sys-firewall. Nov 18 17:56:11 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-vm@sys-firewall comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:11 dom0 kernel: audit: type=1130 audit(1700297771.052:333): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-vm@sys-firewall comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:11 dom0 qubesd[1724]: Reflinked file: '/var/lib/qubes/appvms/sys-whonix/root.img' -> '/var/lib/qubes/appvms/sys-whonix/root-dirty.img~083yvaxq' Nov 18 17:56:11 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/sys-whonix/root-dirty.img~083yvaxq' -> '/var/lib/qubes/appvms/sys-whonix/root-dirty.img' Nov 18 17:56:12 dom0 kernel: loop12: detected capacity change from 0 to 41943040 Nov 18 17:56:12 dom0 kernel: loop13: detected capacity change from 0 to 4194304 Nov 18 17:56:12 dom0 kernel: loop14: detected capacity change from 0 to 20971520 Nov 18 17:56:12 dom0 kernel: loop15: detected capacity change from 0 to 1181368 Nov 18 17:56:12 dom0 qubesd[1724]: vm.sys-whonix: Setting Qubes DB info for the VM Nov 18 17:56:12 dom0 qubesd[1724]: vm.sys-whonix: Starting Qubes DB Nov 18 17:56:12 dom0 audit[2819]: CRED_ACQ pid=2819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 kernel: audit: type=1103 audit(1700297772.112:334): pid=2819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 runuser[2819]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:12 dom0 kernel: audit: type=1105 audit(1700297772.113:335): pid=2819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 audit[2819]: USER_START pid=2819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 runuser[2819]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:12 dom0 audit[2819]: USER_END pid=2819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 audit[2819]: CRED_DISP pid=2819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 kernel: audit: type=1106 audit(1700297772.119:336): pid=2819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 kernel: audit: type=1104 audit(1700297772.119:337): pid=2819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 qubesd[1724]: vm.sys-whonix: Activating the sys-whonix VM Nov 18 17:56:12 dom0 audit[2830]: CRED_ACQ pid=2830 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 runuser[2830]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:12 dom0 kernel: audit: type=1103 audit(1700297772.130:338): pid=2830 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 kernel: audit: type=1105 audit(1700297772.130:339): pid=2830 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 audit[2830]: USER_START pid=2830 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 systemd[1]: Stopping user@993.service - User Manager for UID 993... Nov 18 17:56:12 dom0 systemd[2230]: Activating special unit exit.target... Nov 18 17:56:12 dom0 systemd[2230]: Stopped target default.target - Main User Target. Nov 18 17:56:12 dom0 systemd[2230]: Stopping at-spi-dbus-bus.service - Accessibility services bus... Nov 18 17:56:12 dom0 dbus-broker[2274]: Dispatched 22 messages @ 5(±5)μs / message. Nov 18 17:56:12 dom0 systemd[2230]: Stopping dbus-:1.4-org.a11y.atspi.Registry@0.service... Nov 18 17:56:12 dom0 systemd[2230]: Stopping gvfs-daemon.service - Virtual filesystem service... Nov 18 17:56:12 dom0 systemd[2230]: Stopped gvfs-daemon.service - Virtual filesystem service. Nov 18 17:56:12 dom0 systemd[2230]: Stopped at-spi-dbus-bus.service - Accessibility services bus. Nov 18 17:56:12 dom0 systemd[2230]: Stopped dbus-:1.4-org.a11y.atspi.Registry@0.service. Nov 18 17:56:12 dom0 systemd[2230]: Removed slice app-dbus\x2d:1.4\x2dorg.a11y.atspi.Registry.slice - Slice /app/dbus-:1.4-org.a11y.atspi.Registry. Nov 18 17:56:12 dom0 systemd[2230]: Stopped target basic.target - Basic System. Nov 18 17:56:12 dom0 systemd[2230]: Stopped target paths.target - Paths. Nov 18 17:56:12 dom0 systemd[2230]: Stopped target sockets.target - Sockets. Nov 18 17:56:12 dom0 systemd[2230]: Stopped target timers.target - Timers. Nov 18 17:56:12 dom0 systemd[2230]: Stopped systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Nov 18 17:56:12 dom0 systemd[2230]: Closed pulseaudio.socket - Sound System. Nov 18 17:56:12 dom0 dbus-broker[2267]: Dispatched 287 messages @ 2(±3)μs / message. Nov 18 17:56:12 dom0 systemd[2230]: Stopping dbus-broker.service - D-Bus User Message Bus... Nov 18 17:56:12 dom0 systemd[2230]: Stopped systemd-tmpfiles-setup.service - Create User's Volatile Files and Directories. Nov 18 17:56:12 dom0 systemd[2230]: Stopped dbus-broker.service - D-Bus User Message Bus. Nov 18 17:56:12 dom0 systemd[2230]: Removed slice session.slice - User Core Session Slice. Nov 18 17:56:12 dom0 systemd[2230]: Closed dbus.socket - D-Bus User Message Bus Socket. Nov 18 17:56:12 dom0 systemd[2230]: Removed slice app.slice - User Application Slice. Nov 18 17:56:12 dom0 systemd[2230]: Reached target shutdown.target - Shutdown. Nov 18 17:56:12 dom0 systemd[2230]: Finished systemd-exit.service - Exit the Session. Nov 18 17:56:12 dom0 systemd[2230]: Reached target exit.target - Exit the Session. Nov 18 17:56:12 dom0 systemd[1]: user@993.service: Deactivated successfully. Nov 18 17:56:12 dom0 systemd[1]: Stopped user@993.service - User Manager for UID 993. Nov 18 17:56:12 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@993 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 kernel: audit: type=1131 audit(1700297772.934:340): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@993 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 systemd[1]: Stopping user-runtime-dir@993.service - User Runtime Directory /run/user/993... Nov 18 17:56:12 dom0 systemd[1]: run-user-993.mount: Deactivated successfully. Nov 18 17:56:12 dom0 systemd[1]: user-runtime-dir@993.service: Deactivated successfully. Nov 18 17:56:12 dom0 systemd[1]: Stopped user-runtime-dir@993.service - User Runtime Directory /run/user/993. Nov 18 17:56:12 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user-runtime-dir@993 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:12 dom0 systemd[1]: Removed slice user-993.slice - User Slice of UID 993. Nov 18 17:56:13 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.WindowIconUpdater+: sys-firewall -> @adminvm: allowed to dom0 Nov 18 17:56:14 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.GetDate+nanoseconds: sys-firewall -> @default: allowed to dom0 Nov 18 17:56:15 dom0 kernel: xen-blkback: backend/vbd/4/51712: using 2 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:15 dom0 kernel: xen-blkback: backend/vbd/4/51728: using 2 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:15 dom0 kernel: xen-blkback: backend/vbd/4/51744: using 2 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:15 dom0 kernel: xen-blkback: backend/vbd/4/51760: using 2 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:15 dom0 qubesd[1724]: vm.untrusted: Starting untrusted Nov 18 17:56:15 dom0 qubesd[1724]: Created sparse file: '/var/lib/qubes/appvms/untrusted/volatile-dirty.img~2ul4ye9k' Nov 18 17:56:15 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/untrusted/private-precache.img' -> '/var/lib/qubes/appvms/untrusted/private-dirty.img' Nov 18 17:56:15 dom0 qubesd[1724]: Hardlinked file: '/var/lib/qubes/vm-templates/debian-11/root.img' -> '/var/lib/qubes/appvms/untrusted/root.img' Nov 18 17:56:15 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/untrusted/volatile-dirty.img~2ul4ye9k' -> '/var/lib/qubes/appvms/untrusted/volatile-dirty.img' Nov 18 17:56:16 dom0 qubesd[1724]: Reflinked file: '/var/lib/qubes/appvms/untrusted/root.img' -> '/var/lib/qubes/appvms/untrusted/root-dirty.img~jpf1ktg0' Nov 18 17:56:17 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/untrusted/root-dirty.img~jpf1ktg0' -> '/var/lib/qubes/appvms/untrusted/root-dirty.img' Nov 18 17:56:17 dom0 runuser[2830]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:17 dom0 audit[2830]: USER_END pid=2830 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:17 dom0 audit[2830]: CRED_DISP pid=2830 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:17 dom0 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 18 17:56:17 dom0 kernel: audit: type=1106 audit(1700297777.263:342): pid=2830 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:17 dom0 kernel: audit: type=1104 audit(1700297777.263:343): pid=2830 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 kernel: loop16: detected capacity change from 0 to 41943040 Nov 18 17:56:18 dom0 kernel: loop17: detected capacity change from 0 to 104857600 Nov 18 17:56:18 dom0 kernel: loop18: detected capacity change from 0 to 20971520 Nov 18 17:56:18 dom0 kernel: loop19: detected capacity change from 0 to 1181368 Nov 18 17:56:18 dom0 qubesd[1724]: vm.untrusted: Setting Qubes DB info for the VM Nov 18 17:56:18 dom0 qubesd[1724]: vm.untrusted: Starting Qubes DB Nov 18 17:56:18 dom0 audit[2946]: CRED_ACQ pid=2946 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 audit[2946]: USER_START pid=2946 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 runuser[2946]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:18 dom0 kernel: audit: type=1103 audit(1700297778.590:344): pid=2946 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 kernel: audit: type=1105 audit(1700297778.590:345): pid=2946 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 audit[2946]: USER_END pid=2946 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 audit[2946]: CRED_DISP pid=2946 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 runuser[2946]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:18 dom0 kernel: audit: type=1106 audit(1700297778.599:346): pid=2946 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 kernel: audit: type=1104 audit(1700297778.599:347): pid=2946 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 qubesd[1724]: vm.untrusted: Activating the untrusted VM Nov 18 17:56:18 dom0 systemd[1]: Finished qubes-vm@sys-whonix.service - Start Qubes VM sys-whonix. Nov 18 17:56:18 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-vm@sys-whonix comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 systemd[1]: Reached target multi-user.target - Multi-User System. Nov 18 17:56:18 dom0 systemd[1]: Reached target graphical.target - Graphical Interface. Nov 18 17:56:18 dom0 kernel: audit: type=1130 audit(1700297778.622:348): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=qubes-vm@sys-whonix comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 systemd[1]: Starting systemd-update-utmp-runlevel.service - Record Runlevel Change in UTMP... Nov 18 17:56:18 dom0 audit[2956]: CRED_ACQ pid=2956 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 audit[2956]: USER_START pid=2956 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 kernel: audit: type=1103 audit(1700297778.629:349): pid=2956 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 kernel: audit: type=1105 audit(1700297778.629:350): pid=2956 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 runuser[2956]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:18 dom0 audit[2958]: SYSTEM_RUNLEVEL pid=2958 uid=0 auid=4294967295 ses=4294967295 msg='old-level=N new-level=5 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 kernel: audit: type=1129 audit(1700297778.636:351): pid=2958 uid=0 auid=4294967295 ses=4294967295 msg='old-level=N new-level=5 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 18 17:56:18 dom0 systemd[1]: Finished systemd-update-utmp-runlevel.service - Record Runlevel Change in UTMP. Nov 18 17:56:18 dom0 systemd[1]: Startup finished in 23.373s (firmware) + 31.818s (loader) + 2.870s (kernel) + 6.229s (initrd) + 2min 4.358s (userspace) = 3min 8.651s. Nov 18 17:56:18 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:18 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:56:20 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.WindowIconUpdater+: sys-whonix -> @adminvm: allowed to dom0 Nov 18 17:56:24 dom0 qubesd[1724]: vm.YN2: Starting YN2 Nov 18 17:56:24 dom0 qubesd[1724]: Created sparse file: '/var/lib/qubes/appvms/YN2/volatile-dirty.img~blhv2um3' Nov 18 17:56:24 dom0 qubesd[1724]: Hardlinked file: '/var/lib/qubes/appvms/default-dvm/private.img' -> '/var/lib/qubes/appvms/YN2/private.img' Nov 18 17:56:24 dom0 qubesd[1724]: Reflinked file: '/var/lib/qubes/appvms/YN2/private.img' -> '/var/lib/qubes/appvms/YN2/private-dirty.img~w_zkmtxm' Nov 18 17:56:24 dom0 qubesd[1724]: Hardlinked file: '/var/lib/qubes/vm-templates/debian-11/root.img' -> '/var/lib/qubes/appvms/YN2/root.img' Nov 18 17:56:24 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/YN2/volatile-dirty.img~blhv2um3' -> '/var/lib/qubes/appvms/YN2/volatile-dirty.img' Nov 18 17:56:24 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/YN2/private-dirty.img~w_zkmtxm' -> '/var/lib/qubes/appvms/YN2/private-dirty.img' Nov 18 17:56:24 dom0 qubesd[1724]: Reflinked file: '/var/lib/qubes/appvms/YN2/root.img' -> '/var/lib/qubes/appvms/YN2/root-dirty.img~nqq34me2' Nov 18 17:56:25 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/YN2/root-dirty.img~nqq34me2' -> '/var/lib/qubes/appvms/YN2/root-dirty.img' Nov 18 17:56:26 dom0 kernel: loop20: detected capacity change from 0 to 41943040 Nov 18 17:56:26 dom0 kernel: loop21: detected capacity change from 0 to 4194304 Nov 18 17:56:26 dom0 kernel: loop22: detected capacity change from 0 to 25165824 Nov 18 17:56:26 dom0 kernel: loop23: detected capacity change from 0 to 1181368 Nov 18 17:56:26 dom0 qubesd[1724]: vm.YN2: Setting Qubes DB info for the VM Nov 18 17:56:26 dom0 qubesd[1724]: vm.YN2: Starting Qubes DB Nov 18 17:56:26 dom0 audit[3007]: CRED_ACQ pid=3007 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 18 17:56:26 dom0 kernel: audit: type=1103 audit(1700297786.308:354): pid=3007 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 kernel: audit: type=1105 audit(1700297786.309:355): pid=3007 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 audit[3007]: USER_START pid=3007 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 runuser[3007]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:26 dom0 audit[3007]: USER_END pid=3007 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 audit[3007]: CRED_DISP pid=3007 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 runuser[3007]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:26 dom0 kernel: audit: type=1106 audit(1700297786.316:356): pid=3007 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 kernel: audit: type=1104 audit(1700297786.316:357): pid=3007 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 qubesd[1724]: vm.YN2: Activating the YN2 VM Nov 18 17:56:26 dom0 audit[3016]: CRED_ACQ pid=3016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 kernel: audit: type=1103 audit(1700297786.327:358): pid=3016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 kernel: audit: type=1105 audit(1700297786.328:359): pid=3016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 audit[3016]: USER_START pid=3016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:26 dom0 runuser[3016]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 17:56:29 dom0 kernel: xen-blkback: backend/vbd/6/51712: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:29 dom0 kernel: xen-blkback: backend/vbd/6/51728: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:29 dom0 kernel: xen-blkback: backend/vbd/6/51744: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:29 dom0 kernel: xen-blkback: backend/vbd/6/51760: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:29 dom0 kernel: xen-blkback: backend/vbd/5/51712: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:29 dom0 kernel: xen-blkback: backend/vbd/5/51728: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:29 dom0 kernel: xen-blkback: backend/vbd/5/51744: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:29 dom0 kernel: xen-blkback: backend/vbd/5/51760: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 17:56:31 dom0 audit[2956]: USER_END pid=2956 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:31 dom0 kernel: audit: type=1106 audit(1700297791.862:360): pid=2956 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:31 dom0 kernel: audit: type=1104 audit(1700297791.862:361): pid=2956 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:31 dom0 audit[2956]: CRED_DISP pid=2956 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:31 dom0 runuser[2956]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:31 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.GetDate+nanoseconds: untrusted -> @default: allowed to dom0 Nov 18 17:56:32 dom0 runuser[3016]: pam_unix(runuser:session): session closed for user flo_y Nov 18 17:56:32 dom0 audit[3016]: USER_END pid=3016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:32 dom0 audit[3016]: CRED_DISP pid=3016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:32 dom0 kernel: audit: type=1106 audit(1700297792.609:362): pid=3016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:32 dom0 kernel: audit: type=1104 audit(1700297792.610:363): pid=3016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 17:56:33 dom0 pulseaudio[2518]: ALSA woke us up to write new data to the device, but there was actually nothing to write. Nov 18 17:56:33 dom0 pulseaudio[2518]: Most likely this is a bug in the ALSA driver 'snd_usb_audio'. Please report this issue to the ALSA developers. Nov 18 17:56:33 dom0 pulseaudio[2518]: We were woken up with POLLOUT set -- however a subsequent snd_pcm_avail() returned 0 or another value < min_avail. Nov 18 17:56:34 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.WindowIconUpdater+: untrusted -> @adminvm: allowed to dom0 Nov 18 17:56:34 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.WindowIconUpdater+: YN2 -> @adminvm: allowed to dom0 Nov 18 17:56:37 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.GetDate+nanoseconds: YN2 -> @default: allowed to dom0 Nov 18 17:57:07 dom0 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Nov 18 17:57:07 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:57:07 dom0 kernel: audit: type=1131 audit(1700297827.496:364): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 17:57:07 dom0 audit: BPF prog-id=53 op=UNLOAD Nov 18 17:57:07 dom0 audit: BPF prog-id=52 op=UNLOAD Nov 18 17:57:07 dom0 audit: BPF prog-id=51 op=UNLOAD Nov 18 17:57:07 dom0 kernel: audit: type=1334 audit(1700297827.528:365): prog-id=53 op=UNLOAD Nov 18 17:57:07 dom0 kernel: audit: type=1334 audit(1700297827.528:366): prog-id=52 op=UNLOAD Nov 18 17:57:07 dom0 kernel: audit: type=1334 audit(1700297827.528:367): prog-id=51 op=UNLOAD Nov 18 17:58:19 dom0 systemd[2348]: Starting grub-boot-success.service - Mark boot as successful... Nov 18 17:58:19 dom0 systemd[2348]: Finished grub-boot-success.service - Mark boot as successful. Nov 18 17:58:35 dom0 pulseaudio[2518]: ALSA woke us up to read new data from the device, but there was actually nothing to read. Nov 18 17:58:35 dom0 pulseaudio[2518]: Most likely this is a bug in the ALSA driver 'snd_usb_audio'. Please report this issue to the ALSA developers. Nov 18 17:58:35 dom0 pulseaudio[2518]: We were woken up with POLLIN set -- however a subsequent snd_pcm_avail() returned 0 or another value < min_avail. Nov 18 18:00:01 dom0 CROND[3230]: (root) CMD (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 18:00:01 dom0 audit[3234]: USYS_CONFIG pid=3234 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 18:00:01 dom0 kernel: audit: type=1111 audit(1700298001.500:368): pid=3234 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 18:00:01 dom0 CROND[3229]: (root) CMDEND (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 18:00:29 dom0 qubesd[1724]: vm.vault: Starting vault Nov 18 18:00:29 dom0 qubesd[1724]: Created sparse file: '/var/lib/qubes/appvms/vault/volatile-dirty.img~7p9qramw' Nov 18 18:00:29 dom0 qubesd[1724]: Hardlinked file: '/var/lib/qubes/vm-templates/debian-11/root.img' -> '/var/lib/qubes/appvms/vault/root.img' Nov 18 18:00:29 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/vault/private-precache.img' -> '/var/lib/qubes/appvms/vault/private-dirty.img' Nov 18 18:00:29 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/vault/volatile-dirty.img~7p9qramw' -> '/var/lib/qubes/appvms/vault/volatile-dirty.img' Nov 18 18:00:30 dom0 qubesd[1724]: Reflinked file: '/var/lib/qubes/appvms/vault/root.img' -> '/var/lib/qubes/appvms/vault/root-dirty.img~thbqgvst' Nov 18 18:00:30 dom0 qubesd[1724]: Renamed file: '/var/lib/qubes/appvms/vault/root-dirty.img~thbqgvst' -> '/var/lib/qubes/appvms/vault/root-dirty.img' Nov 18 18:00:31 dom0 kernel: loop24: detected capacity change from 0 to 41943040 Nov 18 18:00:31 dom0 kernel: loop25: detected capacity change from 0 to 943718400 Nov 18 18:00:31 dom0 kernel: loop26: detected capacity change from 0 to 20971520 Nov 18 18:00:31 dom0 kernel: loop27: detected capacity change from 0 to 1181368 Nov 18 18:00:31 dom0 qubesd[1724]: vm.vault: Setting Qubes DB info for the VM Nov 18 18:00:31 dom0 qubesd[1724]: vm.vault: Starting Qubes DB Nov 18 18:00:31 dom0 audit[3259]: CRED_ACQ pid=3259 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 runuser[3259]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 18:00:31 dom0 kernel: audit: type=1103 audit(1700298031.844:369): pid=3259 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 kernel: audit: type=1105 audit(1700298031.844:370): pid=3259 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 audit[3259]: USER_START pid=3259 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 runuser[3259]: pam_unix(runuser:session): session closed for user flo_y Nov 18 18:00:31 dom0 audit[3259]: USER_END pid=3259 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 audit[3259]: CRED_DISP pid=3259 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 kernel: audit: type=1106 audit(1700298031.852:371): pid=3259 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 kernel: audit: type=1104 audit(1700298031.852:372): pid=3259 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 qubesd[1724]: vm.vault: Activating the vault VM Nov 18 18:00:31 dom0 audit[3273]: CRED_ACQ pid=3273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 kernel: audit: type=1103 audit(1700298031.863:373): pid=3273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 runuser[3273]: pam_unix(runuser:session): session opened for user flo_y(uid=1000) by (uid=0) Nov 18 18:00:31 dom0 kernel: audit: type=1105 audit(1700298031.864:374): pid=3273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:31 dom0 audit[3273]: USER_START pid=3273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:37 dom0 kernel: xen-blkback: backend/vbd/7/51712: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 18:00:37 dom0 kernel: xen-blkback: backend/vbd/7/51728: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 18:00:37 dom0 kernel: xen-blkback: backend/vbd/7/51744: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 18:00:37 dom0 kernel: xen-blkback: backend/vbd/7/51760: using 4 queues, protocol 1 (x86_64-abi) persistent grants Nov 18 18:00:39 dom0 runuser[3273]: pam_unix(runuser:session): session closed for user flo_y Nov 18 18:00:39 dom0 audit[3273]: USER_END pid=3273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:39 dom0 audit[3273]: CRED_DISP pid=3273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:39 dom0 kernel: audit: type=1106 audit(1700298039.744:375): pid=3273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:39 dom0 kernel: audit: type=1104 audit(1700298039.744:376): pid=3273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_rootok acct="flo_y" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' Nov 18 18:00:41 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.WindowIconUpdater+: vault -> @adminvm: allowed to dom0 Nov 18 18:00:43 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.GetDate+nanoseconds: vault -> @default: allowed to dom0 Nov 18 18:00:43 dom0 audit: BPF prog-id=54 op=LOAD Nov 18 18:00:43 dom0 kernel: audit: type=1334 audit(1700298043.746:377): prog-id=54 op=LOAD Nov 18 18:00:43 dom0 kernel: audit: type=1334 audit(1700298043.746:378): prog-id=55 op=LOAD Nov 18 18:00:43 dom0 kernel: audit: type=1334 audit(1700298043.746:379): prog-id=56 op=LOAD Nov 18 18:00:43 dom0 audit: BPF prog-id=55 op=LOAD Nov 18 18:00:43 dom0 audit: BPF prog-id=56 op=LOAD Nov 18 18:00:43 dom0 systemd[1]: Starting systemd-hostnamed.service - Hostname Service... Nov 18 18:00:43 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 18:00:43 dom0 kernel: audit: type=1130 audit(1700298043.801:380): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 18:00:43 dom0 systemd[1]: Started systemd-hostnamed.service - Hostname Service. Nov 18 18:01:01 dom0 CROND[3345]: (root) CMD (run-parts /etc/cron.hourly) Nov 18 18:01:01 dom0 run-parts[3348]: (/etc/cron.hourly) starting 0anacron Nov 18 18:01:01 dom0 run-parts[3354]: (/etc/cron.hourly) finished 0anacron Nov 18 18:01:01 dom0 CROND[3344]: (root) CMDEND (run-parts /etc/cron.hourly) Nov 18 18:01:11 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.NotifyUpdates+: sys-net -> @adminvm: allowed to dom0 Nov 18 18:01:19 dom0 systemd[2348]: Created slice background.slice - User Background Tasks Slice. Nov 18 18:01:19 dom0 systemd[2348]: Starting systemd-tmpfiles-clean.service - Cleanup of User's Temporary Files and Directories... Nov 18 18:01:19 dom0 systemd[2348]: Finished systemd-tmpfiles-clean.service - Cleanup of User's Temporary Files and Directories. Nov 18 18:01:31 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.NotifyUpdates+: untrusted -> @adminvm: allowed to dom0 Nov 18 18:01:34 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.NotifyUpdates+: YN2 -> @adminvm: allowed to dom0 Nov 18 18:02:03 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.NotifyUpdates+: sys-firewall -> @adminvm: allowed to dom0 Nov 18 18:02:33 dom0 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Nov 18 18:02:33 dom0 kernel: audit: type=1131 audit(1700298153.620:381): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 18:02:33 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 18:02:33 dom0 audit: BPF prog-id=56 op=UNLOAD Nov 18 18:02:33 dom0 audit: BPF prog-id=55 op=UNLOAD Nov 18 18:02:33 dom0 audit: BPF prog-id=54 op=UNLOAD Nov 18 18:02:33 dom0 kernel: audit: type=1334 audit(1700298153.656:382): prog-id=56 op=UNLOAD Nov 18 18:02:33 dom0 kernel: audit: type=1334 audit(1700298153.656:383): prog-id=55 op=UNLOAD Nov 18 18:02:33 dom0 kernel: audit: type=1334 audit(1700298153.656:384): prog-id=54 op=UNLOAD Nov 18 18:09:19 dom0 systemd[1]: Starting systemd-tmpfiles-clean.service - Cleanup of Temporary Directories... Nov 18 18:09:19 dom0 systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully. Nov 18 18:09:19 dom0 systemd[1]: Finished systemd-tmpfiles-clean.service - Cleanup of Temporary Directories. Nov 18 18:09:19 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 18:09:19 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 18:09:19 dom0 kernel: audit: type=1130 audit(1700298559.589:385): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 18:09:19 dom0 kernel: audit: type=1131 audit(1700298559.589:386): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 19:00:01 dom0 CROND[3751]: (root) CMD (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 19:00:02 dom0 audit[3755]: USYS_CONFIG pid=3755 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 19:00:02 dom0 kernel: audit: type=1111 audit(1700301602.499:387): pid=3755 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 19:00:02 dom0 CROND[3750]: (root) CMDEND (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 19:01:01 dom0 CROND[3759]: (root) CMD (run-parts /etc/cron.hourly) Nov 18 19:01:01 dom0 run-parts[3762]: (/etc/cron.hourly) starting 0anacron Nov 18 19:01:01 dom0 run-parts[3768]: (/etc/cron.hourly) finished 0anacron Nov 18 19:01:01 dom0 CROND[3758]: (root) CMDEND (run-parts /etc/cron.hourly) Nov 18 20:00:01 dom0 CROND[4024]: (root) CMD (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 20:00:02 dom0 audit[4028]: USYS_CONFIG pid=4028 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 20:00:02 dom0 kernel: audit: type=1111 audit(1700305202.499:388): pid=4028 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 20:00:02 dom0 CROND[4023]: (root) CMDEND (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 20:01:01 dom0 CROND[4035]: (root) CMD (run-parts /etc/cron.hourly) Nov 18 20:01:01 dom0 run-parts[4038]: (/etc/cron.hourly) starting 0anacron Nov 18 20:01:01 dom0 run-parts[4044]: (/etc/cron.hourly) finished 0anacron Nov 18 20:01:01 dom0 CROND[4034]: (root) CMDEND (run-parts /etc/cron.hourly) Nov 18 21:00:01 dom0 CROND[4281]: (root) CMD (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 21:00:02 dom0 audit[4285]: USYS_CONFIG pid=4285 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 21:00:02 dom0 kernel: audit: type=1111 audit(1700308802.499:389): pid=4285 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 21:00:02 dom0 CROND[4280]: (root) CMDEND (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 21:01:01 dom0 CROND[4292]: (root) CMD (run-parts /etc/cron.hourly) Nov 18 21:01:01 dom0 run-parts[4295]: (/etc/cron.hourly) starting 0anacron Nov 18 21:01:01 dom0 run-parts[4301]: (/etc/cron.hourly) finished 0anacron Nov 18 21:01:01 dom0 CROND[4291]: (root) CMDEND (run-parts /etc/cron.hourly) Nov 18 22:00:01 dom0 CROND[4540]: (root) CMD (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 22:00:02 dom0 audit[4544]: USYS_CONFIG pid=4544 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 22:00:02 dom0 kernel: audit: type=1111 audit(1700312402.499:390): pid=4544 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 22:00:02 dom0 CROND[4539]: (root) CMDEND (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 22:01:01 dom0 CROND[4552]: (root) CMD (run-parts /etc/cron.hourly) Nov 18 22:01:01 dom0 run-parts[4555]: (/etc/cron.hourly) starting 0anacron Nov 18 22:01:01 dom0 run-parts[4561]: (/etc/cron.hourly) finished 0anacron Nov 18 22:01:01 dom0 CROND[4551]: (root) CMDEND (run-parts /etc/cron.hourly) Nov 18 23:00:01 dom0 CROND[4804]: (root) CMD (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 23:00:02 dom0 audit[4808]: USYS_CONFIG pid=4808 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 23:00:02 dom0 kernel: audit: type=1111 audit(1700316002.499:391): pid=4808 uid=0 auid=4294967295 ses=4294967295 msg='op=change-system-time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' Nov 18 23:00:02 dom0 CROND[4803]: (root) CMDEND (/usr/bin/qvm-sync-clock > /dev/null 2>&1 || true) Nov 18 23:01:01 dom0 CROND[4815]: (root) CMD (run-parts /etc/cron.hourly) Nov 18 23:01:01 dom0 run-parts[4818]: (/etc/cron.hourly) starting 0anacron Nov 18 23:01:01 dom0 run-parts[4824]: (/etc/cron.hourly) finished 0anacron Nov 18 23:01:01 dom0 CROND[4814]: (root) CMDEND (run-parts /etc/cron.hourly) Nov 18 23:56:50 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.GetDate+nanoseconds: sys-firewall -> @default: allowed to dom0 Nov 18 23:56:50 dom0 audit: BPF prog-id=57 op=LOAD Nov 18 23:56:50 dom0 audit: BPF prog-id=58 op=LOAD Nov 18 23:56:50 dom0 audit: BPF prog-id=59 op=LOAD Nov 18 23:56:50 dom0 kernel: audit: type=1334 audit(1700319410.178:392): prog-id=57 op=LOAD Nov 18 23:56:50 dom0 kernel: audit: type=1334 audit(1700319410.178:393): prog-id=58 op=LOAD Nov 18 23:56:50 dom0 kernel: audit: type=1334 audit(1700319410.178:394): prog-id=59 op=LOAD Nov 18 23:56:50 dom0 systemd[1]: Starting systemd-hostnamed.service - Hostname Service... Nov 18 23:56:50 dom0 systemd[1]: Started systemd-hostnamed.service - Hostname Service. Nov 18 23:56:50 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 23:56:50 dom0 kernel: audit: type=1130 audit(1700319410.229:395): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 23:56:58 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.GetDate+nanoseconds: untrusted -> @default: allowed to dom0 Nov 18 23:57:28 dom0 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Nov 18 23:57:28 dom0 kernel: audit: type=1131 audit(1700319448.133:396): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 23:57:28 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 23:57:28 dom0 audit: BPF prog-id=59 op=UNLOAD Nov 18 23:57:28 dom0 audit: BPF prog-id=58 op=UNLOAD Nov 18 23:57:28 dom0 audit: BPF prog-id=57 op=UNLOAD Nov 18 23:57:28 dom0 kernel: audit: type=1334 audit(1700319448.185:397): prog-id=59 op=UNLOAD Nov 18 23:57:28 dom0 kernel: audit: type=1334 audit(1700319448.185:398): prog-id=58 op=UNLOAD Nov 18 23:57:28 dom0 kernel: audit: type=1334 audit(1700319448.185:399): prog-id=57 op=UNLOAD Nov 18 23:57:31 dom0 qrexec-policy-daemon[1862]: qrexec: qubes.GetDate+nanoseconds: YN2 -> @default: allowed to dom0 Nov 18 23:57:31 dom0 audit: BPF prog-id=60 op=LOAD Nov 18 23:57:31 dom0 audit: BPF prog-id=61 op=LOAD Nov 18 23:57:31 dom0 audit: BPF prog-id=62 op=LOAD Nov 18 23:57:31 dom0 kernel: audit: type=1334 audit(1700319451.302:400): prog-id=60 op=LOAD Nov 18 23:57:31 dom0 kernel: audit: type=1334 audit(1700319451.302:401): prog-id=61 op=LOAD Nov 18 23:57:31 dom0 kernel: audit: type=1334 audit(1700319451.302:402): prog-id=62 op=LOAD Nov 18 23:57:31 dom0 systemd[1]: Starting systemd-hostnamed.service - Hostname Service... Nov 18 23:57:31 dom0 systemd[1]: Started systemd-hostnamed.service - Hostname Service. Nov 18 23:57:31 dom0 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 23:57:31 dom0 kernel: audit: type=1130 audit(1700319451.343:403): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 23:58:01 dom0 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Nov 18 23:58:01 dom0 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 23:58:01 dom0 kernel: audit: type=1131 audit(1700319481.358:404): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 18 23:58:01 dom0 audit: BPF prog-id=62 op=UNLOAD Nov 18 23:58:01 dom0 audit: BPF prog-id=61 op=UNLOAD Nov 18 23:58:01 dom0 audit: BPF prog-id=60 op=UNLOAD Nov 18 23:58:01 dom0 kernel: audit: type=1334 audit(1700319481.390:405): prog-id=62 op=UNLOAD Nov 18 23:58:01 dom0 kernel: audit: type=1334 audit(1700319481.390:406): prog-id=61 op=UNLOAD Nov 18 23:58:01 dom0 kernel: audit: type=1334 audit(1700319481.390:407): prog-id=60 op=UNLOAD [flo_y@dom0 ~]$ sudo journalctl | grep Nov 19