<?xml version='1.0' ?>
<audit>
<record version="10" event="execve(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="231" >
<path>/usr/home/snagg/setgr</path>
<attribute mode="755" uid="root" gid="wheel" fsid="90" nodeid="122897" device="538056" />
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="sysctl(3)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="239" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="mmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="244" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="671567872" />
</record>
<record version="10" event="munmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="246" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="sysctl(3)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="249" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="mmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="253" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="671567872" />
</record>
<record version="10" event="open(2) - read" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="255" >
<argument arg-num="2" value="0x0" desc="flags" />
<path>/etc/libmap.conf</path>
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="failure : No such file or directory" retval="4294967295" />
</record>
<record version="10" event="open(2) - read" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="257" >
<argument arg-num="2" value="0x0" desc="flags" />
<path>/var/run/ld-elf.so.hints</path>
<attribute mode="444" uid="root" gid="wheel" fsid="88" nodeid="70889" device="285336" />
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="4" />
</record>
<record version="10" event="lseek(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="259" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="128" />
</record>
<record version="10" event="close(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="261" >
<argument arg-num="2" value="0x4" desc="fd" />
<attribute mode="444" uid="root" gid="wheel" fsid="88" nodeid="70889" device="285336" />
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="access(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="263" >
<path>/lib/libc.so.7</path>
<attribute mode="444" uid="root" gid="wheel" fsid="85" nodeid="15101" device="151544" />
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="open(2) - read" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="265" >
<argument arg-num="2" value="0x0" desc="flags" />
<path>/lib/libc.so.7</path>
<attribute mode="444" uid="root" gid="wheel" fsid="85" nodeid="15101" device="151544" />
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="4" />
</record>
<record version="10" event="208" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="266" >
<argument arg-num="1" value="0x4" desc="fd" />
<attribute mode="444" uid="root" gid="wheel" fsid="85" nodeid="15101" device="151544" />
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="mmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="271" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="671600640" />
</record>
<record version="10" event="mprotect(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="273" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="mprotect(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="277" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="mmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="280" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="672555008" />
</record>
<record version="10" event="mmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="283" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="672579584" />
</record>
<record version="10" event="close(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="286" >
<argument arg-num="2" value="0x4" desc="fd" />
<attribute mode="444" uid="root" gid="wheel" fsid="85" nodeid="15101" device="151544" />
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="sysarch(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="288" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="mmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="292" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="672661504" />
</record>
<record version="10" event="munmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="294" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="mmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="297" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="672661504" />
</record>
<record version="10" event="munmap(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="300" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="sysctl(3)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="303" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="sysctl(3)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="307" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="sysctl(3)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="311" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="sysctl(3)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="316" >
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="readlink(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="319" >
<path>/etc/malloc.conf</path>
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="failure : No such file or directory" retval="4294967295" />
</record>
<record version="10" event="setgroups(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="321" >
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<argument arg-num="1" value="0x3c3c3c3c" desc="setgroups" />
<subject audit-uid="-1" uid="root" gid="wheel" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="208" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="323" >
<argument arg-num="1" value="0x1" desc="fd" />
<attribute mode="600" uid="snagg" gid="tty" fsid="4294967295" nodeid="59" device="59" />
<subject audit-uid="-1" uid="root" gid="1010580540" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="ioctl(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="328" >
<subject audit-uid="-1" uid="root" gid="1010580540" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
<record version="10" event="exit(2)" modifier="0" time="Sun Jun  1 12:57:28 2008" msec="331" >
<exit errval="Error 0" retval="0" />
<subject audit-uid="-1" uid="root" gid="1010580540" ruid="root" rgid="wheel" pid="823" sid="0" tid="0 0.0.0.0" />
<return errval="success" retval="0" />
</record>
</audit>
