---- time->Sun Aug 17 00:35:55 2025 type=PROCTITLE msg=audit(1755405355.109:6480): proctitle=636572747574696C002D4E002D640073716C3A2F6574632F69707365632E64002D2D656D7074792D70617373776F7264 type=SYSCALL msg=audit(1755405355.109:6480): arch=c000003e syscall=83 success=no exit=-13 a0=72fe30 a1=1c0 a2=10 a3=68a15c2b items=0 ppid=16775 pid=16780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="certutil" exe="/usr/bin/certutil" subj=system_u:system_r:ipsec_mgmt_t:s0 key=(null) type=AVC msg=audit(1755405355.109:6480): avc: denied { create } for pid=16780 comm="certutil" name="dbTemp.gIjok9" scontext=system_u:system_r:ipsec_mgmt_t:s0 tcontext=system_u:object_r:ipsec_key_file_t:s0 tclass=dir permissive=0 ---- time->Sun Aug 17 00:35:55 2025 type=PROCTITLE msg=audit(1755405355.244:6481): proctitle=2F7573722F6C6962657865632F69707365632F706C75746F002D2D6C65616B2D646574656374697665002D2D636F6E666967002F6574632F69707365632E636F6E66002D2D6E6F666F726B type=SYSCALL msg=audit(1755405355.244:6481): arch=c000003e syscall=83 success=no exit=-13 a0=55ccba899de0 a1=1c0 a2=11 a3=68a15c2b items=0 ppid=1 pid=16797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pluto" exe="/usr/libexec/ipsec/pluto" subj=system_u:system_r:ipsec_t:s0 key=(null) type=AVC msg=audit(1755405355.244:6481): avc: denied { create } for pid=16797 comm="pluto" name="dbTemp.tvP4pj" scontext=system_u:system_r:ipsec_t:s0 tcontext=system_u:object_r:ipsec_key_file_t:s0 tclass=dir permissive=0 ---- time->Sun Aug 17 00:35:59 2025 type=PROCTITLE msg=audit(1755405359.400:6613): proctitle=2F7573722F6C6962657865632F69707365632F706C75746F002D2D6C65616B2D646574656374697665002D2D636F6E666967002F6574632F69707365632E636F6E66002D2D6E6F666F726B type=SYSCALL msg=audit(1755405359.400:6613): arch=c000003e syscall=83 success=no exit=-13 a0=558fb31aade0 a1=1c0 a2=11 a3=68a15c2f items=0 ppid=1 pid=17369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pluto" exe="/usr/libexec/ipsec/pluto" subj=system_u:system_r:ipsec_t:s0 key=(null) type=AVC msg=audit(1755405359.400:6613): avc: denied { create } for pid=17369 comm="pluto" name="dbTemp.O9QB4H" scontext=system_u:system_r:ipsec_t:s0 tcontext=system_u:object_r:ipsec_key_file_t:s0 tclass=dir permissive=0