[root@server1 ~]# tailf /var/log/audit/audit.log
type=SYSCALL msg=audit(1281880315.975:31387): arch=40000003 syscall=5 success=yes exit=15 a0=8922740 a1=8641 a2=1a4 a3=8922740 items=0 ppid=1297 pid=1300 auid=4294967295 uid=0 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) ses=4294967295 comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
type=AVC msg=audit(1281880315.982:31388): avc: denied { getattr } for pid=1300 comm="squid" path="/var/spool/videocache/swap.state" dev=sda3 ino=15709 scontext=system_u:system_r:squid_t:s0 tcontext=system_u
bject_r:var_spool_t:s0 tclass=file
type=SYSCALL msg=audit(1281880315.982:31388): arch=40000003 syscall=195 success=yes exit=0 a0=8922770 a1=bf81f7e4 a2=4c5ff4 a3=8922710 items=0 ppid=1297 pid=1300 auid=4294967295 uid=0 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) ses=4294967295 comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
type=AVC msg=audit(1281880315.982:31389): avc: denied { setattr } for pid=1300 comm="squid" name="swap.state.clean" dev=sda3 ino=15045 scontext=system_u:system_r:squid_t:s0 tcontext=system_u
bject_r:var_spool_t:s0 tclass=file
type=SYSCALL msg=audit(1281880315.982:31389): arch=40000003 syscall=94 success=yes exit=0 a0=f a1=81a0 a2=82fb224 a3=8922710 items=0 ppid=1297 pid=1300 auid=4294967295 uid=0 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) ses=4294967295 comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
type=AVC msg=audit(1281880315.997:31390): avc: denied { remove_name } for pid=1300 comm="squid" name="swap.state.clean" dev=sda3 ino=15045 scontext=system_u:system_r:squid_t:s0 tcontext=system_u
bject_r:var_spool_t:s0 tclass=dir
type=AVC msg=audit(1281880315.997:31390): avc: denied { rename } for pid=1300 comm="squid" name="swap.state.clean" dev=sda3 ino=15045 scontext=system_u:system_r:squid_t:s0 tcontext=system_u
bject_r:var_spool_t:s0 tclass=file
type=AVC msg=audit(1281880315.997:31390): avc: denied { unlink } for pid=1300 comm="squid" name="swap.state" dev=sda3 ino=15709 scontext=system_u:system_r:squid_t:s0 tcontext=system_u
bject_r:var_spool_t:s0 tclass=file
type=SYSCALL msg=audit(1281880315.997:31390): arch=40000003 syscall=38 success=yes exit=0 a0=8922740 a1=8922770 a2=8922770 a3=8922740 items=0 ppid=1297 pid=1300 auid=4294967295 uid=0 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) ses=4294967295 comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0 key=(null)
type=DAEMON_END msg=audit(1281880328.197:1836): auditd normal halt, sending auid=0 pid=2666 subj=system_u:system_r:initrc_t:s0 res=success